I wish cheap serial-port managed switches were a thing.

The reasonably cheap managed switches often expose the management interface on all ports, even all VLANs (with no way turn it off).

It’s frustrating that this is just a software limitation - the hardware is damn capable of much more.

Hell, I’d love to have a switch where the management interface was an I2C port that I could plug into just for reprogramming.

Really just want dumb VLANs, no fancy RSTP or such.

FYI Zyxel consumer switches seem to be more secure in this regard (I had a GS1200).

But yeah, even the enterprisey switches have braindead defaults like loading configuration from tftp at startup.