Ask HN: Best practice for home network design

Corporate networks have lots of resources around good practice: partitioning, zero trust, vlans etc. But home networks seem to me to be a giant attack surfaces, and incredibly juicy targets.

What constitutes modern best practice for the design and implementation of secure, performant home networks? Im thinking there must be more than NAT, tossing Alexa in the garbage and crossed fingers.