@astrid allow me to introduce you to building management networks, where people do exactly that on the grounds of “security”, and then run both subnets on the same physical network without VLANs.