Comment by user2722
I've got various IP subranges categorized by probability of having to block them in the router's firewall.
Main idea was locking updates to once or twice a year and resort to HomeAssistant.
It's at 33% execution stage so no idea on the feasibility.