a VLAN is assigned to a specific port on the same subnet.

now I have to know which port is for that VLAN specifically.

now I have to segment my network to ensure I know which IPs are on that VLAN.

now I have to statically assign IPs.

now I need to replace my router and rebuild everything.

or I setup a separate network on a different subnet with firewall rules to ensure nothing can talk to anything outside of the private network and let dhcp do assignments.

hmmmm…which one is easier to maintain… I wonder…

VLANs literally exist because it would be too costly to run dedicated networking hardware in enterprise solutions. from a networking perspective in a selfhosting or small business environment VLANs are overkill and high maintenance.