I got HeatIT Z-Push for my Z-wave network recently and it has worked just fine for the short time I’ve been using it.
For wifi-enabled smart devices I created a separate VLAN where all IOT stuff is and that network doesn’t have access to the internet at all, but you could just assign static IP addresses to the devices and prevent them from accessing the internet on the firewall. That’s of course true only for devices you can control via LAN access as well, if your devices happen to work only with the cloud then that approach won’t work.
Our Gree heatpump only needed cloud access for a minute during setup and now it receives command via Home Assistant, but I can understand that even that can be too much information to leak out of the network. At least they got my public IP address and location data from my phone (setup was only possible with an mobile app which required some permissions to work at all), so better approach would’ve been to check these things before purchase.
If you want to wander more on the DIY side of things with ESPHome you can design what ever kind of button array you wish, but that’s a bit more complex route and if you’re just looking for a simple wall mounted switch that might not be the best option out there.
Think a large office space or industrial application with several hundred (or thousands) of hosts connected to the network. Some of them need to be isolated from the internet and/or rest of the network, some need only access to the internet, some need internet and local services and so on.
With that kind of setup you could just run separate cables and unmanaged switches for every different type of network you have and have the router manage where each of those can talk to. However, that would be pretty difficult to change or expand while being pretty expensive as you need a ton of hardware and cabling to do it. Instead you use VLANs which kinda-sorta split your single hardware switch into multiple virtual ones and you can still manage their access from a single router.
If you replace all the switches with routers they’re quite a bit more expensive and there’s not too many routers with 24 or 48 ports around. And additonally router configuration is more complex than just telling the switch that ‘ports 1-10 are on vlan id 5 and ports 15-20 are on id 8’. With dozens of switches that adds up pretty fast. And while you could run most routers as a switch you’ll just waste your money with that.
VLANs can be pretty useful in home environment too, but they’re mostly used in bigger environments.