Thank you for the David link 🎆

The distrust is adding up, I see your point. Will be adding an openWRT router to host a VPN and also manage VLANs. Ultimately might move AdGuard there instead of piHole on my NAS.

Still not sure what to think about the cloud-pangolin setup, so might work stepwise.

Thanks!