So, I'm about to buy a new route, NAS, and laptop, and wanted to capture as many security practices from stage 1 as possible.  Any thoughts/changes/recommendations are deeply needed!
Router:
Synology RT2600AC
LOADED WITH:
Synology Intrusion Prevention 
Client VPN(NORDVPN paid subscription)...