I recently installed Decox55s with my AT&T FIOS router.  The AT&T router is in pass through mode with both 2.4 and 5 ghz radios turned off.  Deco is in WiFi mode

everything appears to be working well.

i am looking at iot devices. It looks like there are three ways to isolate iot devices specific to deco 55s (goal: increased nw security)

Device isolation vs guest nw vs create iot network

thoughts on which approach will provide security without limiting the ability to manage iot devices?

thank you

p.s. I am a non-technical end user