The long term strategy is to run a proxmox host as your Layer3 platform and install a virtual owrt instance there. Then you are relieved of the HW drama that surrounds owrt. Obviously a second proxmox host is needed for your backend servers, I’m not advocating for a singular VM platform. Once you virtualized your router, you can comfortably experiment with pf,opn,fire,vya …platforms.

Oh and skip Mikrotik, those people are so in love with their routerOs they fail to see its going to be their headstone … bigger than John Holmes’.

Debian user here. All people have a doorkey. Some people have an alarm system as well. Infosec is about ’ what do you have and what do you know '. So in principle TPM is a defencible argument. You should absolutely bail from MS products for different reasons. Like privacy. Your PC isn’t yours anymore. Your NPU will reduce THEIR costs. Etc.

Don’t enter Linux thinking its a drop in replacement. Go slow and do ‘ships in the night’. Move data over to the new ship. Start embracing OSS on windows, it’ll be familiar when you finally bail. G luck.