Certainly not trying to shill, but there is one company that develops a very secure networking product to help this very situation. Still regular Ethernet networking, but every packet is filtered so you can control what can communicate, how it can communicate, and to what devices it can communicate. Meaning that if you unplug a device and move it to another port, it won’t communicate anymore or receive any packets (no more broadcast traffic going everywhere, you can limit that) because that port hasn’t been configured for that device. I’d be happy to talk to you about it if you’re interested to know more. I’m not in sales so just informational only.