3) Sophos Home[1] which has the bonus feature of being cloud-managed and not providing any control to the local interactive user.
4) Sophos XG Firewall Home Edition[2] on whatever $100-ish hardware the pFense crowd is currently in love with. Web filtering for Advertising and Threats, AV scanning.