Future ideas to pursue: Explore the openwrt suite of plugins (hello ad blockers), put an opnsense router in front of both the #OpenWRT devices, add a sim card to the bpi for network failover, and maybe add a tiny fileserver on the untrusted network to remove the smb attack surface. Feels great to spend a little time on tech and have a much more robust setup for the fun!