ASUS - RT-AX1800S

There are a list of the recommended routers for each price point on the Virtual Desktop Discord. I bought this one in the end and I am very happy with it https://amzn.eu/d/9iYillZ

Any router you buy for home Internet will have a firewall built-in. You seem to be under the impression that a firewall needs to be bought separately. This is not true. The R605 is a wired only router, so you will need something to provide WiFi as well. I suggest for your apparent level to just get a typical all-in-one home routers, like a typical ASUS or Netgear. Make sure it's at least WiFi 6 (AX) and within your budget, and it'll be fine. I usually recommend this as an affordable model: https://www.amazon.com/ASUS-AX1800-Router-RT-AX1800S-Subscription-Free/dp/B09M9477NS/

For a good, simple, budget conscious router easily enough for 400 sq ft and 100 Mbps, I recommend the ASUS AX1800. It's $70 in the US, I imagine it's similar in the EU. https://www.amazon.com/ASUS-AX1800-Router-RT-AX1800S-Subscription-Free/dp/B09M9477NS/ It supports using a VPN Client mode, so you can hook into Proton if you wish. Whether that's a good idea or not depends on a lot of things, like if you work from home and if your employer would allow it, difficulty in using some streaming services with a VPN, whether you game and need to open ports, etc. But at least the option is there in that model router.

I would definitely upgrade the router first. It is ancient and, as you've noticed, capped by its 100 Mbps Ethernet ports. Any modern WiFi 6 or better router will run circles around it. If you're generally happy with the coverage of your current router except for the speed, then this budget ASUS model is affordable and far superior to what you are using: https://www.amazon.com/ASUS-AX1800-Router-RT-AX1800S-Subscription-Free/dp/B09M9477NS/ If you want to invest a bit more to get something in the mid or upper tier, by all means do so. But since your gaming consoles and PC are wired in and your WiFi usage is just Roku and phones, that budget model will be just fine too. I like ASUS for all-in-one router models. Without changing modems, you should be able to hit 300-350 Mbps by just changing routers. Whether or not buying an expensive modem is worth it to get that extra bit of speed (to 400 Mbps) is up to you. I personally don't think you'll notice. You can also check with Xfinity to see if they will give you a modem free of charge. They might give you a modem / router combo unit that perfectly fits your needs and you don't have to buy anything. As long as they do NOT change a monthly fee, it's worth trying. If they DO change a monthly fee, then proceed in using your own equipment exclusively, starting with the router upgrade, and then seeing if you need a modem upgrade at all.

I own the ASUS RT-AX1800 and RT-AX3000. I like them both. I don't use either of them as my gateway anymore though. I upgraded to a sg-1100 pfSense gateway recently and have both the routers running in AP mode now. One for upstairs coverage and one for downstairs coverage. I, as others have said, encourage you to install Merlin firmware if you choose ASUS. Just make sure your model has Merlin firmware available. The RT-AX3000 v2 was my gateway before the sg-1100 and I had to install forked third-party Merlin firmware because there weren't any current versions that supported the v2 model.

I'm using the 1800s as a node and my main router is the RT-BE86U. I can say that the 1800s is holding up super well as a node. I recommend the ASUS.

I stick with Asus, my experience with TP link is less than stellar. Genuinely any router in the 100-200 mark will do the job for you. I usually recommend this to people - https://www.jbhifi.com.au/products/asus-rt-ax54hp-dual-band-ax1800-wi-fi-6-router UI is pretty friendly for newbies that want to learn about how their system works Q2 - Honestly same, I get them muddled up all the time, router is what your devices connect to, modem is what "translates" the data - someone more adept can probably explain this better but if you are on FTTP you can consider the NBN box a replacement to your modem, so you only need a router.

I've had zero problems with M1 for many years. Only went down once, and that was for scheduled maintenance in the middle of the night. Also, it's not just your internet plan that could be the cause of any issues. If your router isn't good enough, or is in a terrible position, or is overheating, or the bomb shelter is between your laptop and the router, you are gonna have issues no matter what plan you have. I have a standard 1Gbps plan but an Asus gaming router with ethernet cables going to the 3 heaviest users in the home – PS5, living TV and bedroom TV. I also set up a second router using Asus AImesh to provide wifi signal to one of the further corners of the house.

I've been using AiMesh since the beginning, and it was rocky at first, but now I'm currently quite happy with it. One solid main router and two APs outside. What unifi did you get to replace your setup and do you think it was worth the cost?

Asus AiMesh - Yea TP-Link Deco - Yes TP-Link Easy Mesh - Not sure

I use Asus routers in my Ai mesh network and it gives me complete control over everything and I've loved it. I use that coupled with family link from Google and I feel like I've done my job as a parent blocking as much bullshit as I can for my kids.  But don't worry, their friends who's parents don't care about a single thing they consume will come along and ruin your hard work. Or your kids will be kids and find loop holes, which they always do. But you still tried. 

Asus AiMesh can be configured without an app and uses local credentials for management.

I went from DD-WRT for years to ASUS AiMesh and have been on Unifi equipment for a good four years now. I never have any issues with roaming (3600+ home) and I can fine tune whenever necessary (rare). I love the Unifi and don't plan on moving away any time soon. If you want peace of mind, I definitely also recommend Unifi.

As has been said, plug in everything you can. For a basic option, the Asus routers with AiMesh are a pretty simple solution. Start with one on the second floor centrally located and see if you need more. Use inSSIDer to see how your signal strength is as what kind of interference you have and set settings accordingly. If you’re not reaching all corners, add another compatible Asus and put them on floors 1 and 3 (both wired connection to WAN jack)