A VLAN splits one physical network into several logical ones that cannot talk to each other without passing a router. In a homelab it separates trusted machines from cameras, smart plugs and guest devices. The point is blast radius: when something is compromised, it should reach as little as possible.