Maybe this is too nerdy for this group. I got an OpenWRT ONE router, replaced the old TP-Link one I had. The bad press got to me. The new one is fast, I could not believe how much faster things like downloading files is now.
The worst part was that I had picked out a complicated password with lots of punctuation, and typing that on phones and on-screen keyboards for TVs and game consoles was painful.
Also I pinged Google, and got an IPv6 response for the first time.
Mine runs Wireguard for the whole network along with being a basic media/file server. One USB port with a 2tb drive does a lot.
Also, for the password consider using a password manager so you can autofill, and also consider using a MAC address whitelist so you can be sure only intended devices can connect.
Small note, MAC address whitelisting isn’t really a security measure. People can change MAC address quite easily to one on your whitelist.
It might stop non technical children but a teenager with google can bypass that easy.