I am definitely feeling like going either Protectli+opnSense or Netgate+pfSense .
Those are *precisely* the kind of devices I was looking for. I did not realize how relatively inexpensive they are, especially considering they'd be replacing my edge router quite nicely.

Just educating myself in my spare time, until I finally proceed and purchase one of those.