Yep. I treat work computers as hostile entities. They are always on an isolated guest SSID and VLAN and I never use them for personal tasks.

When my kids start bringing school-owned hardware home that's getting the same treatment.