Firewall or VPN Gateway

I am currently designing a home networking for my new house. What I am trying to understand is that what device should I deploy to act as a firewall in the network?

Currently I am with ISP router but planning to replace that with GL iNet Brume 2 security Gateway. Here I am looking at two things, security and VPN possibilities. Now, I came across pfSense and Netgate which costs a lot in EU but may provide more protections. But I am not sure if they provide WireGuard VPN client.

Can anyone guide me towards the right direction?

On small networks you usually have one device that acts like a router, firewall and VPN gateway. If you want to use a separate firewall then you’ll get double NAT unless you can disable NAT on the main router, which usually isn’t possible on ISP provided routers and other home routers.

get double NAT unless you can disable NAT on the main router, which usually isn’t possible on ISP provided routers and other home routers.

I plan to drop the ISP router and use the Brume 2 as my gateway as I can use PPoE settings on the Brume 2.