That is an excellent idea, thank you! I have some micro routers that I can use.
https://help.brother-usa.com/app/answers/detail/a_id/164663/...
Then there is the issue of certain devices only accepting things like HomeKit via a barcode and/or discovery, and not via IP addresses.
If I could just do IP addresses it would be so much more easy to cordon off things. IPs can talk across networks with ease, no hacks required, but at least I control it.
Inside of a network it's very hard to selectively allow / deny traffic.