Comment by pieter_mj

Additionally, set a malware blocking dns in the router and a Mb-dns/DoH in the browser and move them to Linux.