They work well, and some of the latest models have just received a firmware update. You could get two. You could set up one to always use WireGuard VPN and configure the other to use only Tor (which has a dedicated setting).