would WPA3 and pre-shared keys not be enough? If every endpoint is scanning for malware, using host based firewalls, monitoring access logs and activity, it could be possible no?