For all users reading this on their own home network: DISABLE ALL GUEST NETWORKS

It seems as if approved guest access now == system-wide access (at the hardware level). User compartmentalization no longer works.