[eximius]

Or wireguard with your own DNS (unbound) blackhole-ing ad networks: https://www.ckn.io/blog/2017/11/14/wireguard-vpn-typical-set...

Or IPv6. Personally, I like running a Mikrotik Hex Lite as my home router with Ubiquiti wireless APs behind it. I've definitely learned a lot about networking trying to get everything set up nice and secure. That'd make a good blog post, actually...

EDIT: Zerotier is a great service. I kind of dream of some collaboration between Zerotier and Wireguard. Zerotier is Software Defined Networking, I guess(?), and it'd be cool to have wireguard be part of that stack. Though maybe that's not necessary. I haven't dug into Zerotier recently enough to know if thats redundant or at all useful.