If I have a handful of "smart" switches that will handle 802.1Q vlan tagging both at the perimeter and the core of my network, will the tags survive if there is a completely dump unmanaged switch ...
I don't personally like to use VLANs as a security border, but the risk is pretty durn low in the environment you describe. Assuming that the equipment is all physically secured, and you are happy ...