Yes, I expose Home Assistant this way

I use nextdns as I can use that when mobile but if you want a local solution adguard home has DOH/DOT built in and a nicer interface than pihole IMHO

Once you’ve chosen a VPN take a look at gluetun as a dockerised VPN gateway

I use Caddy and agree with your last point in the context of Crowdsec

Quite a number of smart home devices may not even support 5GHz wifi, I would check first.

5GHz/40MHz wifi should be good for ~300Mbps in the same room but will rapidly go down with distance and obstructions.

Increase your channel width to 80 MHz. Yours is set to 40 or lower.

Increasing channel width will increase bandwidth but reduce range and increase interference.

If you only have a basic router channel width settings may not be available though.

If the device you’re using is 1x1 mimo then 300 Mbps is what you can expect. A 2x2 mimo device will double that or perhaps a bit more.

Been with PIA for years, tried Nord once but the speeds were awful so got my money back

Turn them into security cameras:

https://play.google.com/store/apps/details?id=com.ivuu&hl=en_GB&gl=US&pli=1

https://alfred.camera/

You don’t need any open ports to use a cloudflared tunnel

Remember to get yourself a VPN subscription and check out gluetun to keep your connection private