Zigbee.

You will need an antenna /hub though. I use a sky connect antennae, it's all locked into my house.

If you have to go wifi, tplink /tapo literally have a "local only" mode when you firewall them out. The only issue is they warn you you can't operate them unless you're connected to your home wifi. Which is rather the point.