> designed for users who have never configured a VLAN or written a firewall rule.

I always get the impression that when things are designed this way, you can't configure a VLAN or write a firewall rule, and so far I've never been proven wrong. :/