VLAN isolation is good enough for almost everything. It is good enough to contain an AI. In the 0.00001% chance an AI finds an exploit to hop VLANs, I'll eat my hat.
Even on switches with leaky VLANs, it's no practical issue in this case because the sender can never get a response back.
Are you aware many switches run linux? Ubiquiti for example.