VLAN isolation is good enough for almost everything. It is good enough to contain an AI. In the 0.00001% chance an AI finds an exploit to hop VLANs, I'll eat my hat.

Even on switches with leaky VLANs, it's no practical issue in this case because the sender can never get a response back.