The IoT stuff also needs to communicate with other trusted machines (so that they can be controlled, e.g. turning on/off the lights or watching the videos from the cameras); putting them all on a vLAN would prevent that from working, too.
Granted, an average user will not be able to figure out how to do this and a standard private VLAN guest network is going to prevent this from working.