Wow, maybe this is the push I need to finally set up an isolated "IOT" VLAN at my home.

I did that relatively recently. Make sure to spend the time planning it out.

I've ended up with numerous VLANs, one for entertainment devices, one for security system(s), one for guests, one for IoT trash, etc.

If the devices are this level of untrusted, there's a lot of separation necessary.