"A Cheaper, Simpler Option
A few months after publishing this article, I came across a new router that gets most of the way toward achieving the goals of this project. For only $100 you can buy the Flint (GL-AX1800) and protect all your home network traffic with a WireGuard VPN. The caveats:
Your speeds will be limited to 500 Mbps due to the weaker ARM CPU.
The selective routing configurability is more limited; the best it can do is allow you to set up a "guest network" that isn't routed over the VPN and then you must configure your non-VPN device to use that Wi-Fi network."
#m=image%2Fjpeg&dim=1920x1446&blurhash=%239CPq%2CIUW%40IU%25JM%7B-nxs%25KnM%253RPt6aeIVWBRjRk%3FY9I-iIpt6M%7CRkRkM%7D%7EU-%2C9ckDoKRks%3AWCt6%3FEM%7DRn%251a%24a%7DofkBj%5BM%7CofRjxtazWCj%5BayRl%25It6E2t6Rkf6M%7CWCWC&x=d0e9057cf82f41486fba376f5e79c3a82f9962f8565b8031abd4cdc9e8f186e0
#m=image%2Fjpeg&dim=1017x1920&blurhash=%5D3SPX%7B9Es%3Bx%5E%3FaDjD%25IoIUxt_MRR%25L%25L9GrokD.7xt%25NS%24-.t7R.j%3DxwWmD*V%7Bs*tSIUM%7Bt7WE-nE3M%7B%25KNK9GWCoJxtxu&x=62ca68b7883db6b5150d08c98d7848f72a9c1d4a1b01f3b23285a2b59a911997
#m=image%2Fjpeg&dim=1080x1753&blurhash=%5E3S6PmIV%7Ep_2%7Eq%3FbRiIUxuozozt74mxt-%3BWFxuM%7CxZt6a%24j%5DocRj%3FEbIRnWBayRk%25iayITt6IUWC00j%5Et6t6ogoft8WCM%7BxtRjofD%2Bt6t7floct6&x=79fdbb55d0ce93112c33c19ae6b6297b945043e5fa5b8b0e71e9abb89e60b861