Finally ditched my ISP’s router and installed my own opnsense firewall with my own Access Point.
I have crowdsec running on opnsense to block attacks + adguard to block ads and malicious domains. My network is segmented between my homelab that is exposed and my AP.