Block all connections by default
It'd be great to have an option to block all new connections by default, and then you unblock the clients you want. Right now, you have to do the opposite: go one by one and block the devices you don't want to have connection.
Yes, and default new devices on private network to Paused and on guest network to not paused ... I'm sick of the kids' friends jumping on my private network when I haven't vetted their devices and it doesn't matter how often I tell the kids to only give out the guest network password, they forget it ...