Most modern routes also routinely live various security holes, I wouldn't trust the built-in Guest WiFi functionality at all.

Better yet, run a separate network device and VLAN for untrusted devices.