You need to learn about firewalls! Home Network Router Safety PfSense Explained: DNS Blocklists Explained: Why you need to care about privacy: How to encrypt your DNS NBTV: Naomi Brockwell Channel: https://www.youtube.com/@NaomiBrockwellTV/videos
I have a brand new Protectli FW4C 4port/2.5GbE with OPNSense preinstalled on it. It has a 2.4Gb wifi AP as well. I only use 2.4 wifi at my house and the protectli (along with an 8port 2.5GbE unmanaged switch) is going to replace 2 asus routers running asus-merlin. Haven't hooked it up yet as I have to disable the entire network in order to do so and my roommate is always using it. Soon though.
I keep my wifi separate and tie it in through a switch, with the modem hooked into the Netgate 1100 with PfSense. It's cool being able to fully control everything. I have my DNS server set to Quad 9 to prevent my ISP from snooping too.
My first step is always replacing the factory router firmware. Getting off cable internet for a fiber connection helps base level security and reliability no reboots in months. These are good, there are others: Welcome to the OpenWrt Project (new) DD-WRT Tomato Firmware | Polarcloud.com