Exactly. The OS on my gateway only goes down on kernel updates, and I can crontab them (unlike with the ISP supplied box). My son and his mates can put any ol

Exactly. The OS on my gateway only goes down on kernel updates, and I can crontab them (unlike with the ISP supplied box). My son and his mates can put any old malware infested phone on his SSID, but they can't get to my LAN. I can run my gitlab etc without affecting him, apart from QoS - any the latter is something the ISP gateway doesn't even offer. Anybody sufficiently experienced can segregate services on a single box without any worry.