Just simple no other services or firewall ports exposed it performs one purpose connect to internet and tunnel over wireguard and rebroadcast on seperate radio. All other junk just get rid of it.no file sharing.
- randomize mac address
- connect to internet
- tunnel over encrypted vpn
- rebroadcast on wifi
basically just do what black hole cloud firmware does which is based on GLinet routers (google Black Hole Cloud or Tiny Hardware Firewall).