Any way to filter shelly access?

For me this is a network problem. I look this from my router and wonder how to do this. Please move to correct area if it is totally wrong.

My setup is:

9 pro PM4. 3x3 phase configuration 3 shelly EM3

Dedicated WLAN and VLAN with hole poked to firewall (OpenBSD) for firmware update. So they have safe corner in network.

So far everything is good, nice and OK. However as everything is metered, there are very dangerous switches like fridge, freezer and so on which can cause bad things to happen if those circuits are turned off but are really interesting to measure.

I'm not worried that much some cracker getting my network but more something like own stupidity to bite from unexpected direction. But if I expose everything to home assistant' it can access everything.

At least I couldn't find anything really useful to filter out flipping those switches. Has anyone seen some filter or mapper or similar project?