You can enable WiFi isolation in most access points. I've thought about a second AP and lan in my router for this reason. My current AP puts guests on a separate subnet not sure how well isolated though.