[treflop]

You could run a separate switch/gateway and a separate Wi-Fi access point. Worth it? Idk

But it’s nice when your Wi-Fi is just a dumb box with almost no settings that you can upgrade independently.

[hunter2_]

Pfsense (on a Proxmox VM, on a laptop with 2 NICs), tp-link managed switch with PoE on half the ports, all-in-one ASUS box configured as an AP only (and switch). It's only WiFi 5, but in a pinch that could go back to doing everything. Rock solid, with no reboots in years other than what ended up being unnecessary ones. Went 390+ days at one point on pfsense.