On the off chance anyone is familiar with MikroTik, I have a question. I'm between the RB5009 and the L009. The latter is much cheaper and less powerful, but should still do what I need. I think. 1GBPS is enough for me, and the most intensive things I plan to do are Wireguard for several clients and two or three VLANs. I like the price of the L009, but I don't want to get something now I'll only have to upgrade in a year. I don't know if the RB5009 is worth it, or is massively overpowered.
in reply to Jamie Teh

@Jamie Teh @Kyle Borah @Alex Hall I have used mikrotik devices a lot in my previous job. The company I've worked for had like hundreds of them in production. I've always used SSH and CLI interface to control them. For the home setup I'd recommend going with lower specs mikrotik. Wireguard VPN is not so CPU intensive as compared to other VPNs and tunnels.
The security issues mostly come from the fact router OS allows you to do all ssorts of veird configs like disabling firewall filter rules completelly, or not blocking incoming DNS, NTP traffic whatever.
I would say it's a good think so inside your network you can have all these in place and you should secure mostly edge routers.