I tried to start implementing separate lans/vlans at home for trusted and untrusted devises. But quickly realized I don't really trust any of it, save my personal laptop and a few of the servers I run.
1) devices only I have write access to 2) devices others have access to 3) iot (which are basically users I've never met)
At least I can segregate me running a port scan from my laptop, to a family members phone running a portscan from some spyware game they downloaded.
I have a good idea how much I can trust my own devices, even if my phone's baseband OS is sending an unstoppable stream of location data and super cookies.
But this NAS/cloud connected storage thing is a bit of a oddball, since you're supposed to trust it with your data, but can't trust it with unfettered network access.