Wifi with a firewalled network is a lot easier to debug, which is how I do it in my house.

There's no Internet from the IoT SSID.