School me on VLANs and POE switches

I'm building a house and it will have some POE cameras, a smart home system and a POE Radio Ra3 processor. I want to isolate the cameras and the home automation from the internet so someone in China or at Google can't see my cameras or every tine I turn on a light or set my thermostat. However, I still want to be able to control my stuff remotely when I am away and probably use Siri to control stuff by voice at home.

First question: Can someone recommend a POE switch. I will need about 8 POE ports and each camera can draw as much as 12 watts. I probably need about 8 non-POE ports to run to other locations in the house. Most POE switches I have looked at have total power budgets that it seems I might exceed with, say, six cameras and the RA3 processor. Also I believe the switch needs to be managed to implement the VLAN but I am not sure since I know nothing about VLANs.

Second question: How do you implement a VLAN? I have read some stuff that starts with words like "A VLAN is a logical grouping ..." and other technical jargon I don't understand. I don't know a logical grouping from an illogical grouping or just a group or set. So I need someone to dumb it down for me like: 1. Turn on your computer. 2. Open a browser. 3. Type [something; I don't know what] to access the switch. 4. Once you are in there do steps A, B and C.

Third question: If I implement something to isolate the equipment from the internet and the cloud, how do I access it remotely?

Thanks to anyone who can set me on the right path.