Hello,
Ivan Pepelnjak just published a really good summary explaining how these concepts fit together and why recommended best practices are what they are.
Many folks on this forum seem to struggle with VLANs and network segregation so this article might prove useful:
https://blog.ipspace.net/2023/01/l2-l3-segments.html
Kind regards,
Patrick
I'll have a read, thanks Patrick.