I’d be very surprised if your isp router did not have at least a basic vlan and firewall but that is all I use, separate vlans and then firewall rules to allow my phone to communicate with the iot devices.
Routers can be virtualized in your server or if you want to buy a separate device anything that runs openwrt will work, doesn’t have to be a huge expensive one.
Can be expensive, can also be cheap. I enjoy the five dollar arduinos and twenty dollar single board computers just as much as the high power machines.