OpenWrt secure routers

I’d say the OpenWRT One is likely the best general consumer grade hardware if you don’t have anything specific in mind for requirements. I suspect it’s the best privacy and likely quite good security for OpenWRT, given it’s the most first party support hardware that exists for the project.