> I went with building an isolated network, but I think that's outside the relm of what most consumers can do.

An off-the-shelf consumer PVR that uses wired ethernet typically has its own integrated PoE switch on its own subnet. Maybe it will route to your LAN if you probe the private ranges, but it's also a fairly straightforward software issue to fix - nothing fundamental to the arrangement, and at no additional marginal cost.