Run a system-wide VPN or encrypted DNS (DoH/DoT) directly on the router.
Equipped with dual 10G NICs. Work is ongoing to fully stabilize these ports with draft patches . w1700k openwrt exclusive