Security Options

looking for any interesting security / functions i could add to my setup,

i have a rpi4 running open wrt, i have minimized my layout to 2 seperate vlans running through an edgerouter x, i have a cheap wifi 6 netgear router running in access mode, it provides both my main and my guest network through my trusted network (it has its own isolation for guest network)

i have my work laptop on its own vlan with rules to allow it to recieve dhcp and dns but nothing else

i have DoH running via luci-app-https-dns-proxy

i have SQM running and i am getting my paid for line rate.

im planning to add adblock but i have not decided on the best one yet