You have a WiFi 6E Mesh, that's awesome, would be really stupid to replace it.
However, you could look how to combine the Asus WiFi Mesh with a self-hosted firewall.
E.g. using a OPNsense-VM as Gateway / DHCP / DNS server für all clients in the network ..
But that's more for playing around.