You might want to check out the
NanoPi R5S: great OpenWRT support, solid firewall capabilities, and handles VLAN tagging like a champ.
Another good option is the
GL.iNet Flint 2 (AX6000): fast, firmware-flexible, and solid Wi-Fi 6 with advanced routing features out of the box.
tekkieDa@tektove.com:~$ ▌