Possible vulnerability: TunnelVision (CVE-2024-3661)

What place is that?

What is "it"? And more importantly what is your point? Noone is disputing that if you change (or inject) routes then traffic could be pointed to a new destination. Why are you still posting as if there was a disagreement about that?

create an interface alias "lan" and let devices that need dhcp sit on it, and on the main lan disable dhcp and connect devices to it by configuring them manually and setting their IP address.
those devices that will be connected to the interface alias β€œlan” will already be their problem

I want to happily connect to random ethernet socket in a vacation house.