No, I was referring to a separate DMZ host…

Physically separate firewall connection, with different firewall policies between internet<–> DMZ than DMZ <–> internal network.

Not a VLAN. VLAN Hopping makes it possible to jump between VLANs, so they should only be consided as an administration tool, not a security mechanism.

But, I agree with you, putting a device on the internet isn’t something that anyone should do without understanding the technical issues.