Yes, I allow _some_ more or less we’ll defined traffic from home network to iot specifically to allow control.

I also do run HomeKit, homebridge but devices/hubs are in the dedicated network.