Create guest networks with AP isolation for IOT and guests. Switch to a good DNS such as Quad9 or NextDNS, enable Wireguard for all devices on your network. Set a strong admin password and disable remote/WAN access to your router.
Check out the list of extra packages available on their website, you'll get ideas for all types of cool stuff you can do.