I currently have an enterprise grade router and am going to replace it with OPNsense.

For my wifi access points, it's OpenWRT, but they don't do any routing, DHCP or anything interesting. It really just converts between ethernet and wifi.

I've heard microtik is pretty decent in terms of security, but I haven't used it nor done any analysis on it personally.