They were not lied to though... it was known they were going to do this.

Wireguard.

Unless you actually have a need for the public to access the services then you shouldn't be exposing them. If it's just you and a few household members that need access then you should be using ddns and wireguard, or similar.

My phone auto connects with wireguard as soon as I leave my home ssid, so I never lose access to my services.

No, but it requires work and time and money for maintenance, insurance, and taxes.

It's completely legal to make your own firearms. I have a few guns made from 80% lowers.

It's better to setup ACLs instead of VLANs, VLANS can accomplish the goal, but that's not what they are meant for, whereas that is exactly what ACLs are meant for. I do this with all of my IoT devices. Not a single IoT device has access to WAN, yet I can still remotely access and control them all with a WireGuard tunnel that my phone autoconnects to as soon as I lose access to my WiFi.

It's crazy when you have to protect a device that you purchased from the manufacturer so you can use it the way you want. I'm in a similar situation with my Firesticks where I block them from updates. I have removed the shitty ad-infested default dashboard/launcher and put my own clean launcher on it. But Amazon began resetting it with updates and started blocking the ability to change it. The solution was to block the update servers domains to those devices on my network, I lose Prime Video and some other Amazon specific stuff, but it's worth it. I don't have a dogshit dashboard... I have a clean dashboard iwth only the apps I want: Kodi clients for my NAS, jellfyin client for my NAS, S0undTV, TiviMate, SmartTube... that's all I need, and all I want to see.

OpenBooks - Easily download/pirate books.

uLogger - Logging my travel and rides.

Adminer - GUI frontend that can access multiple databases.

Minimalist-Web-Notepad - A simple notepad for quick notes and lists.

I'd be weirded out they are running Windows. I no longer trust the technical opinion of anyone that runs that joke of an OS.