Most broadcast traffic for IoT stuff is mDNS or SSDP.

I feel like we could build a custom reflector/firewall that would make selective isolation possible.