@neil To add to those specific tips: A great way to get the Wireguard VPN, "Pi-hole ad block functionality" and a much more secure home network is to set up a pfSense or OpenSense router/firewall instead of regular consumer (often chinese or ISP sourced) hardware.
Well worth the investment.