Port isolation is the best switch security feature you're not using

Limit which ports can talk to each other and be more secure