But this would be pointless, usually can be configured a vlan that’s isolated and can’t see other devices inside the lan, but if you deny the internet access to the devices inside this vlan, you want be able to use them.
Relevant: Best practice for IOT devices