+1 for Mikrotik.
Get one of their routers that have an Arm or x86 processor and you can run PiHole and a DDNS updater on there as containers. Wireguard support (client and server) is built in.
Even their cheapest hardware that runs routerOS has access to all the same features as their enterprise level gear.
iPhone still can’t report the RSSI of a wireless network. Until they make that work, anyone who works in it/tech has to carry a different device to test wireless networks.
The wireless hardware is in the phone. Just let me use it.