A good thing to setup are VLANS. I would at minimum creatie a VLAN for untrested devices like iot stuff.
You can setup a firewall so you can access the insecure devices but they cant access your trusted network them self.
This gives a good base to expand on.