Honestly, It depends on your threat model. Some basic steps of security your network are more than enough for most people.

Assuring your endpoints are always up to date
Assuring you change the default SSID name and Password
Assuring you disable all features you dont utilize

If you're worried about the company viewing your data on the router, utilize a device level VPN or set up a router/Box that all traffic goes through before you hit the router (As others have mentioned) with a standalone AP and router/model so you can VPN before any traffic hits the router.

I have been on Bitwarden for about 8 years now. Paid for it about 7 years ago. I LOVE it. I also use KeePassXC On my Linux box and for work - That's a great platform for anything that requires even more security (Work, Security focused websites, etc)