I recently figured out how to do a vlan and set it so IoT devices can't see each other, just access the Internet (AP isolation). It hasn't broken anything so far (Matter devices excluded).