Good well known recommendation companies from that article (that are also cross-referenced across the Internet in general):
- GL.iNET’s MT-6000 Flint 2
- Firewalla
- BananaPi R4 if you want something with more performance for a given price
- R4 Pro is also in the works in your wish to have 10Gbe but it is still quite a dev board, don’t expect everything to work flawlessly
- R3 Mini if you want the opposite, something smaller and cute to carry around or use as an Access Point
- Turris is also a known company apparently, they have their own firmware but the Turris Omnia is also compatible with OpenWRT
I’m definitely no security expert but I heard about this one from Naomi Brookwell (it can support some 4G):
Looks decent in terms of features and privacy even tho it might be sourcing the hardware itself from China. Not sure about Qualcom, Mediatek etc…but maybe it’s not a good thing? Again no expert. 
Tomaž Zaman is building his own router + software last time I checked.
Looks quite knowledgeable on the topic and has a page for his upcoming product here: mono.si. Might be worth giving it a look for something very much different?
Jeff Geerling reviewed an early version of it recently.
Finally yes, a BananiPi is probably the best way to go because it’s based on OpenWRT One itself and looks very self-contained + amazing price/performance ratio. 
Btw, they also plan to release the Two soon with a spec bump and around 250$?
Still too early to have more details tho.
Finally, you have Ubiquiti (which is not recommended by the post above btw).
It’s a banger for the price/performance ratio and some people are very happy with their proprietary software but at the same time, I am not sure how private it is.
It’s the old decision of, do you:
- harden an iPhone
- run GrapheneOS on an Android
You could probably also just wipe their software and install OpenWRT on it but then you pretty much lose the entire point of buying some good hardware for cheap.
And the same could be told for any kind of crappy router that you nuke.
TLDR: probably go for the OpenWRT one (with any BananaPi
+ some accessories to tune it further) tbh. 
Update: I personally ended up going with the Flint 2 for the following reasons:
- easier to buy and with no fluff as of when/where I would receive it, stock on Aliexpress is not always the best
- I’m not sure about the overall quality of the R4/R4 Pro when it comes down to shielding and doing the thing right
- R4 Pro’s firmware situation is still a hot mess and I don’t feel like it is nowhere as stable as the R4’s + I don’t want to receive a cool PCB but have no actual use for it waiting for a firmware bump

- follows my needs better: WiFi 7 is not ready at all, I don’t plan on using a 5G mobile card for a backup, I am not sure I want to straight upgrade to 10Gbe given the amount of work it requires, I’ll probably stick to 2.5G for now
- since I realized that a basic WiFi 6 router would be more than enough for me right now, I then decided to pick the most stable and reliable recommendation over the Internet: the Flint 2
- you can flash its firmware if you want a Zero Trust approach

- the OpenWRT forums themselves are leaning heavily towards Flint 2 or BPi R4, hence both are safe bets for something that works just well

Now it’s time to flash that bad boi! 