segment my network into several different VLANs.

Some IoT devices require access to the internet and multicast access to phone apps: Roku, Chromecast, etc. I put them in a vlan that does not have access to desktop computers, file shares, or network hardware management.

Other IoT devices do not need internet access: printers, smart TVs, etc. I put them in a vlan that is completely blocked from everything except the phones and computers. (Smart TVs I usually won't even connect at all. I'd much rather plug in dedicated devices like Roku and Chromecast.)

Most of this was just because I was curious. I actually don't really care if anyone spies on me. I just wanted to tinker. (I won't allow a Google Home or Alexa in the bedroom though.)