For now, I'm isolating all mobile devices by granting their access to internet through a separate vlan, and limiting its bandwidth.
There is more than one OS that is used by Mobile manufacturers and we still don't have a full control on the apps that are used by each OS.

So my best solution to avoid any malicious bugs in the network, was to isolate all mobile devices.