I’ve decided to order the Xiaomi gateway for now, just for simplicities sake. Then look into Zigbee2mqtt at a later stage, thanks for everyones thoughts
interesting, really interesting, I do not trust xiaomi level security
which config did you do in your router ?
If your router has parental controls you can use these, just assign the gateway a static IP and then block WAN access to that particular device.
If not you may be able to configure the internal firewall to block that IP instead. but dont know if that would affect LAN communication or not too…
I used this method on a cheap Chinese wifi IP cam that I didn’t trust phoning home (which has now broken after only 6months, so I was right to not trust it!).
gave it a fixed IP and limited access to local network only.