If your budget allows for it, I'd recommend getting a Unifi Security Gateway (USG) along with a Unifi AP AC Pro or AP AC Lite depending on your Wifi needs.
My experience with these Ubiquiti Networks devices has been great so far. The APs are extremely stable and it's easy and reliable to extend Wifi networks by adding new devices later if needed. Also, I personally prefer one device doing one thing, i.e. having the AP not do the routing. The USG will act as a DHCP and firewall in this setup.
With regard to the admin experience: With the Ubiquiti devices, you don't have an admin interface on the device. You use a controller which runs on a client or server that you already have. The controller software is sophisticated. You could run it on a docker host on your NAS or on your local laptop or desktop. This way you can manage the whole network without having to rely on one device.
* Unifi Security Gateway: https://www.ubnt.com/unifi-routing/usg/
* Unifi AP AC Lite: https://www.ubnt.com/unifi/unifi-ap-ac-lite/
* Unifi AP AC Pro: https://www.ubnt.com/unifi/unifi-ap-ac-pro/