Interesting, a different path lead me to build a pfsense fw/router to give me the ability to use vlans and stateful fw rules to isolate IoT devices from trusted ones and to centralise the management of VPN’s and content filters.
I like you am limited to a adsl 2 line but at ~60/10 but generally it never feels constrained so I’m not sure if this is a rabbit hole I need to investigate or not.
Have you perceived any difference since you made these changes or is this log data evidenced only?