Dunno, define "dumb". Ubiquiti APs run linux, you can get a shell, but generally the APs are pretty simple and managed by their management util, which you can

Dunno, define "dumb". Ubiquiti APs run linux, you can get a shell, but generally the APs are pretty simple and managed by their management util, which you can run somewhere on your network. The APs don't control the router, don't write/change firewall rules, and generally just focus on reliably handling wifi duties. So you could build yourself a router, run OpenWRT, pfsense, or whatever floats your board to control which packets go where, and which ports are visible from where. The APs do not need access to the internet, and generally anything sensitive going over the network should be encrypted anyways. I'd consider a router I control the OS and configuration of with a ubiquiti AP (or 3) more secure than the usual router configured by some corporation or running a bunch of wifi binary blobs.