I didn't do anything - Lemmy.world

Guest network on a separate VLAN is the way to go.