You can set the WiFi Access Point to have a guest network that doesn't route any traffic to the internal network, only the internet. That way, any visitors can get online but not access your NAS, PC etc.
This didn't protect from malicious actors, but is a good thing to do. It also means you can have a short, memorable WiFi password for your visitors to use and a longer, more secure one for all of your own devices.
You can set the WiFi Access Point to have a guest network that doesn't route any traffic to the internal network, only the internet. That way, any visitors can get online but not access your NAS, PC etc.
This didn't protect from malicious actors, but is a good thing to do. It also means you can have a short, memorable WiFi password for your visitors to use and a longer, more secure one for all of your own devices.