that is what vlans are for. but having only gigabit ports is limiting here.
RISC-V is quite wimpy this far, so it’s not even clear if it can saturate a gigabit with features turned on. The one benefit is that it doesn’t have Intel IME/AMT, AMD PSP or ARM TrustZone backdoors built-in, but I would be extremely surprised if the Chinese SpaceMiT CPU didn’t have Chinese backdoors of its own.
VLANs would appear to defeat the ease of use aspect here. Plus that means you need managed switches, and know how to use them.
I helped a bit to develop this UI myself. Support for vlans was baked into it from day 1. The idea being good admin/guest/iot/hosted/etc separation without extra access points.