@GomezAddams:
You don't need a separate VLAN for your cameras. VLANs logically segregate traffic, they don't increase bandwidth. Remember, unicast traffic between two endpoints is limited to the two switch ports they are connected to. VLANs only affect broadcast traffic, and on an IP network, broadcasts are almost negligible.
Unfortunately, this notion that using VLANS will keep one sort of traffic from interfering from other traffic seems pretty pervasive. I wish I had a dime for every solution vendor who's come in and claimed that their solution requires a separate VLAN so all of our other traffic won't impinge on the performance of their equipment.
The switch I am planning on using has a 70Gbps backplane so it should be able to handle the traffic I plan on putting on it. 8x IP cameras streaming 1080p+ (1.5-3MP) constantly to a dedicated NVR software should generate a bit of traffic. The main goal with the IP camera VLAN is to prevent the cameras from being hacked directly or from someone using the cameras as a point of attack into the secure network. The DVR/NVR would either have two NICs or a trunked port so that it could see the IP camera feeds as well as allow remote viewing and admin of the NVR software.
On the secure network I plan on handling multiple Plex video streams and SMB file shares from my FreeNAS box along with general internet access for trusted devices.
The guest network would only have access to the internet, possibly throttled.
The IoT VLAN would be setup similar to the IP camera VLAN. eg you can't hack my garage door opener to get into my secure network, or be on the guest network and open my garage door. I would setup rules in pfSense to allow the IoT devices that needed to talk to the Secure network to do so for things like a Smart Hub device.
So even with no VLANs that switch should be able to handle all of my LAN traffic. Hopefully VLANs and matching SSIDs will make setting up IoT devices easier/more secure and make my network more secure overall, like viruses on guests computers deleting files in my SMB shares.