You're absolutely right! The spider stays!
The rack goes:
The ISP's ONT (in the hallway, not visible here) ---> a TP-link SG105E swtich:
- ---> a VPN router (RPi4 + OpenWRT + Mullvad) ---> an Asus RT-AX58U AX3000 router (in access point mode, 2.4GHz turned off) ---> most appliances at home
- ---> a plain router (RPi4 + OpenWRT) ---> an Asus RT-AX58U AX3000 version 2 router (in access point mode, 2.4GHz turned off) ---> Tor bridge (the white device in the picture, a RPi 5) + occasionally backup for internet access