I'm definitely new to networking, but I've already done some research and I guess I thought I understood it but now I'm not so sure. That's all interesting information though, thanks. I'll be sure to read more about it.
By NGFW I was referring to things like Endian, OPNSense, pfSense, Sophos, and Untangle. Are they really not worth it for hobbyist use? Right now all I have is ufw (and some scanners like clamav, maldet, aide, and rkhunter), but all that seems to do is block and/or whitelist IPs and ports. I would have thought a NGFW would be worth it, at least for anything that's going to be public-facing.
Is OpenWRT even a good idea for a network switch? The router I'm looking at comes with it by default, so chances are I won't have to configure it much myself. But for the network switch my main concern is that I don't want to use some proprietary firmware that's just gonna phone home to the company's servers and basically render any privacy/security measures I take useless.
I know to avoid netgear, but is there a particular brand of network switch that FOSS/homelab people prefer and trust? If so I'll just use the default firmware...