Looking for a new router/AP to solve an isolation problem

I have been concerned about my network security with all the discussion about IOT devices being hack-able and Guest network users not being able to access anything but the internet. Couple this with the fact that the FCC is blocking my current network router from getting updates beyond next year. So I'm looking to replace my Deco X5000 Mesh system.

It became more urgent today when I tried to test if my networks, IOT and Guest, were isolated from the Main network. Turns out they are not. The main reason is my home wiring is connected with 2 Netgear GS308 switches. It turns out that those are truly dump switch and are striping VLAN ID 591 so folks on my guest network can get to my back end servers. Also learned that the IOT network is not isolated because phone and smart TV apps need to talk to Alexa, light switches, and vacuums.

With previous routers before Mesh, I had dead spots in the house where WiFi calling would randomly disconnect. The Mesh system fixed that.

So I'm looking to replace my Mesh router system with an OpenWrt compatible Mesh system and replace all my dumb switches with Managed switches.

I'm sure there are some opinions on all this. I'd love to hear them.

Are you sure? https://openwrt.org/toh/netgear/gs308t_1

GS308E is what I need. Plain old 308 is unmanaged

If you intend to use OpenWrt on the GS308E read this: Adding support for Netgear GS308E?