oh my.

My quality of life changed SO MUCH when I put in vlans.

machines go onto the appropriate vlan.

the winner was the "jail" vlan. Any machine on it can't get out. Maybe for updates through a filtering proxy like privoxy.

Every house should have vlans like this.

the status quo of "every machine can talk to the internet" or "buy our cloud-based router" is just uncomfortably common.