MT7621 OC and VPN

VPN sure ain't it - old, but still valid https://overengineer.dev/blog/2019/04/08/very-precarious-narrative/

read A Wireguard comparison DB.

You ISP can only see the IPs you're connecting to, if you use the https-dns-proxy or smartdns packages.