VLAN Segmentation for Hospital Campus

Wassup everybody. I hope y'all having great time.

I work for a healthcare facility and looking to revamp VLAN design. We have several medical devices in the laboratory and X-ray departments. The question is whether to create VLANs per vendor per device type or to group all lab devices into a Lab VLAN and all X-ray devices into a Radiology VLAN.

However I have some thoughts that makes decision little difficult.

Creating VLANs per vendor or device type might add unnecessary complexity. But Also, some devices might have specific vulnerabilities and could cause potential breaches. Keeping them separate might prevent lateral movement. But this might increases complexity. More VLANs mean more subnets, more ACLs