It's even recommended when building out a CCTV system with cheap Chinese IP cameras that like to phone home all the time. Stick 'em on a VLAN which can't access anything besides your local NVR.