Anyone considering the TP-Link OEM firmware should be aware of their dismal security record, both in as-delivered as well as failure to patch over time, along with the FCC consent decree.

If you need VPN or DNS over TLS of any sort, you should examine your options with any OEM firmware. Generally these features are lacking.

I have found my GL-AR750S that runs GL.iNet v3 firmware to be a reliable business-travel companion, US and Europe so far, on extended, multi-country trips. On these trips, OpenVPN and WireGuard, along with DNS over TLS have all been critical. This includes carrying VOIP over the VPN tunnel.

(Personally, I have not experienced any of the mentioned connectivity issues withe either of my GL-AR750S units. I also believe that the thermal design of the GL-AR750S is far superior to other consumer units in its class. Opening the unit you will find a custom heatsink that covers the SoC and wireless chip, not some stick-on piece of crap or, as other manufacturers do, bare.)