Comment by kevin_nisbet

Agreed, with an ACL that blocks any device to device communication within the network.