Enjoy! I use: WireGuard for VPN and Netifd based pbr for VPN with wan failover ; CAKE using my own recipe to deal with VPN pbr + CAKE-autorate for sqm; stubby for encrypted DNS and use CleanBrowsing Family filter to filter out obscene content; DNS hijacking to redirect DNS to my own server of choice; rclone and samba for cloud mount for scanner upload pdf's direct to cloud via network share; and WDS with fast transition for full WiFi coverage with roaming.
OpenWrt unlocks so many possibilities.