As a slightly knowledgeable home user, my router cannot do subnets so I use MAC lists. My desktop, the Wife's desktop, my phone, her phone and the printer (not wireless).
For the Wifi I changed the SSID and set it to not broadcast, and admin password and that uses the same MAC list. So both wired and wifi is covered.
No IoT, No hassle and no Tasha Yar