I needed (ok, wanted) to add some more switches to my home.  I'd been puzzled why local control wasn't working when the internet was down anyway, so I went looking before I spent another couple hundo.  Imagine my surprise to see TP-Links claming local control was a security risk.  Huh?  From their own application running locally?

No.    I imagine we all know this is about control and access, and naturally I'm not OK with that. 

Community:

1)  Has anybody found a way to locally control the switches when internet access is down?  At present even the Kasa app doesn't allow it!

2)  Anybody got a suggestion for a new switch standard that isn't super expensive and isn't pulling this kind of stunt? 

3)  Given this can only be about TP-Link have control of my devices, I now need to isolate access from their devices to anything else on my network.   Anybody know of a good document/primer on options?  Wireless vlan would require vlan client software = No.  It sort of seems like a dedicated SSID with FW rules blocking cross forwarding would do it.  I don't think my Asus AP's allow that though.   Tips?

TIA!