I have a dedicated IOT ssid and vlan (when my Orbi goes, I don't know what I'll replace it with...).

Each wifi node on that ssid is in client isolation mode and I carefully monitor where outbound traffic from that segment is headed.

It's a lot of work, but it makes me feel slightly better about a thermostat, self-hosted security camera setup, and home assistant setup.

That doesn't stop it from holding the scans in memory until a stray open network gives it bandwidth.

Or from the devices making their own ad-hoc network until the world wide web is reached. Not that that's happening in this, specific case, but the former example stands.