better than the older-generation USG they replaced. They can now route IDS/IPS traffic at Gigabit speeds which was a huge problem with the USG. I used to have the USG. You'd be lucky to get 250 Mbps with IDS/IPS on a USG so I turned it off. There are four choices now with the new small routers.

For more robust firewall solutions you need something like OPNsense or pfSense. I have been experimenting with OPNsense.

What I like about Ubiquiti gear is purpose-built components managed by a single user-friendly Network application rather than the all-in-one approach of most consumer-grade gear; although Ubiquiti has some of that as well.

Here is what I currently have in my home:

Cloud Gateway Ultra - $129 - https://store.ui.com/us/en/pro/category/all-unifi-cloud-gateways/products/ucg-ultra
One 16-port PoE switch ($199 when I bought it. They are now on to a different generation)
Two 8-port PoE switches - $109 each - https://store.ui.com/us/en/pro/category/switching-utility/products/usw-lite-8-poe
Access Points
-Two U6 Lite - $99 each - https://store.ui.com/us/en/pro/category/all-wifi/products/u6-lite
-One U6 Extender - $149 - https://store.ui.com/us/en/pro/category/all-wifi/products/u6-extender
-One AC In-Wall - $99 - https://store.ui.com/us/en/pro/category/all-wifi/products/uap-ac-iw
-One older AC-LR (WiFi 5) on the covered deck in the backyard

Do you need all this? Unlikely.

I have a home built in the late 80s so no Ethernet cabling, no patch panel, etc. I had to run Ethernet cables through my attic and down through walls where I wanted switches, APs, etc. I also dropped a cable through a closet floor down into the basement where I have a switch and AP.