I have 3 XE75, and one each of X50-PoE and X50-Outdoor.

The DECO network is running in AP mode with the Main XE-75 connected downstream of a wired router.

After an year, I finally enabled the iot network and moved all my smart devices to it.

I was surprised to find despite the name, the iot Network fully communicates with the main network unlike the "Guest" network, which is isolated from the Main with a toggle setting.

I suppose I have 2 options:

1) Move all iot devices to the "Guest" network and keep the local access toggle off for the guest network.

2) Leave iots in the iot network and Implement device isolation on per-device basis to the clients in the iot network.

For option 2, the problem is, I do not have the "Security tab" in the app main page shown in screenshots. I only have "Network" and "More" tabs. I explored all options, but do not see the device isolation features on either Main or iot network clients.

Q1)  How do I get the "Security" tab? My android app version is 3.9.109

Q2) I do not see any operational difference between option and option 2. Am I wrong?