I made a separate wifi network for the smart trash, they can't see each other and aren't allowed any ingress or egress. I then add individual firewall rules on a needed basis.