Kincony KC868-AG ESP32 WiFi IR RF. Wish they sold just an IR version. They also have a Pro version with Zigbee, ESP32, and a tasmota chip. Still don’t understand why it has both. Can be setup is ESPHome but there built in software is nice. It can connect to an MQTT broker and can be a http/https server to send IR commands via http_request commands.
If you’re that worried about WiFi and smart home devices, setup a VLAN, put all your iOT/smart home devices on it and only allow traffic from your HA server on your main LAN, that way if something does happen all it could do is talk to one machine on your network. They would have to hack or brute force to get into your HA server and I find that practically impossible if you use 2FA. If you don’t want to mess with your router settings, or your router doesn’t have VLAN settings then don’t complain about security there are so many free options that require a maybe 100 dollar PC, just needs 2 NICs. Then install Pfsense or OPNsense. Honestly, just doing that will help you security wise.
Mesh setups are convenient but they tend to poor in the features and capability department, sometimes the security department also. I still remember when some script kiddies hacked a bunch of routers and sent DDOS attacks that brought down Xbox live and PSN. Mostly sent from compromised routers granted that was a while ago but one thing remains the same. Router makers suck at security patches and updates because they already sold you the hardware. hardwire when it has a NIC but mostly due to speed and reliability but there is an extra layer of security to some degree depending on how you
configure your network.