I would say to just set up a separate router/firewall and AP. You could then get a firewall that has some actual features, as opposed to the consumer-grade crap that the Linksyses and NetGears give you. But that may well fail your "have no appetite for tinkering with it" criterion.