I explicitly mean this:
I didn’t modify the DNS in the Wireguard file. But my “home router” is also set to Cloudflare with Encrypted DNS. No, you employer won’t care what DNS you set, and you are allowed to set whatever DNS you like. I use Cloudflare with Encrypted DNS on all my routers since A) Encrypted DNS is good, and B) Cloudflare has a very fast DNS, so it (slightly) increases performance.
For your home setup, I generally advise two options. Either A) keep your home router, and connect a Brume2 behind it or B) replace your ISP router with a Flint 2. By doing B), you are eliminating a “hop” and just consolidating everything to one box. I personally did option B and power my whole house network with a Flint2, plus having it host the VPN config. It works perfectly fine for me. I lean towards B if you want to keep everything on one device, and are thinking about replacing your home router anyway. Otherwise, option A is perfectly fine. I tried both configs, and honestly didn’t notice any significant performance differences in terms of speed or ping times so both will likely meet your needs. For the travel router, I use the Beryl AX. Though a Slate AX would also work well depending on if you need an extra Ethernet port. You can look up the specs, but regardless of where you end up, you want to use Gl-inet’s newer hardware simply because they have newer chipsets and higher throughputs for VPN. No reason to cheap out on hardware if your job depends on it…