I use a separate 2.4GHz-only SSID and VLAN for my IoT devices, because I just don't trust them.