[drnick1]

It is hard to disagree with this approach. While I still use WiFi, it is a separate subnet and only whitelisted MACs are allowed to use it. Cameras and microphones are always unplugged when not in use, and my phone runs GrapheneOS. I also removed the hands-free microphone in my car, as well as the cellular modem.

[kayson]

Is MAC whitelisting anything but security theater? Isn't it trivial to determine a valid client MAC then spoof it?

[drnick1]

What makes you say that? It does not seem trivial at all to guess a valid MAC.