As the title says, I need a little help with the right direction of my home network.

Recently turned an IntensePC into an OPNSense router and changed my precious previous "all in one" into a WAP. I've got a small managed Linksys switch and a Pi 3 ready to add in.

Edit: Nighthawk R8000 is old all in one

Network currently is the OPNSense into a dumb switch that feeds Plex (hardwire) and the WAP. Also have two Wyze cams attached.

I have a few ideas for the next steps but I'd like to get some input on what else might be smart to do.

What I was considering:

Swap dumb switch for Managed Switch PiHole / OpenDNS addition Give Plex and Wyze cams their own VLAN (and restrict Wyze cams outbound access)

I'm wondering if there are any other obvious things that could/should be done.