I agree is would be nice to have not just Pause but also a Block WAN option.

As a workaround ... when I replaced me router with Eero devices I also had a small number of devices I wanted only to have LAN access. Fortunately I wired my house before WiFi became fast enough, so they happened to all be wired devices, so were all on my switch before hitting the Eero gateway. So when the joined the new network i just put them all into a new profile I named "Paused Permanently" and a paused that profile. They all work among themselves and anything on WiFi that isn't paused can still get to them.