Not actually! I mean, yes, you’d need another device, but your router itself can be the VPN host if it’s the right model. The VPN server software is extremely lightweight, so most higher end routers just include it as an option in management, but you can get away with a cheap router and something like a cheap raspberry pi/clone, which would also give you something to put pihole on