Ah, most of the stuff I statically assign ends up providing services to dhcp devices. File shares, media servers, whatever.

Always struggled with the concept of isolated servers because usually I set them up for things I want to access. Even setting up a game server for friends i'm going to want to directly connect internally.

On the other hand in business, isolating things makes much more sense. I isolate old hosts that we can't quite decommission or update for reasons, and setup as-isolated-as-reasonable ways for users to access these hosts like with rdp to a jumpbox that doesn't have any other access beyond rdp and said server.