OpenWrt is awesome. I run WireGuard on my Linksys 1200ac. I have no choice since my ISP is cgnat. But I run it into my Synology router as a second WAN (load balance/fall over). That way I can set what devices I want on the VPN via policy route, excluding Apple TV and services that don’t play...