As someone who works in IT - a suggestion for anyone who has concerns for thermostats and such: device isolation or a separate WiFi SSID (guest WiFi can work too) for them.
I've got a WiFi-connected thermostat, it's on a separate guest SSID which has device isolation turned on.
Now, if you...