That’s the dream. After years I finally got serious about learning/implementing VLANs and have begun to isolate everything out/properly firewall them. Most of the smart home stuff is already Z-Wave/Zigbee, but the few devices that aren’t are mostly already migrated onto a dedicated IOT network, as is the hubs, where only devices that have business talking to each other can even see one another.

I have yet to play with tailscale, but it’s on the list.