Not all IoT is bad... If you decide to get some cloud IoT and keep it on the main network that's on you, but you could have a separate vlan or even a separate protocol like zigbee and z-wave to secure these devices and control them locally with home assistant. It might not be good enough for highly sensitive enterprise environments, but more than enough for average Joe who's not being targeted by APTs or espionage