The requirement sounded simple and was not: the POS system must not share a network with CCTV, guests must not reach anything internal, and the store must keep working when the primary link drops.
We designed VLAN-level segmentation applied identically everywhere, and selected different routers for urban and rural sites based on the actual state of the mobile networks in each location.