I want to _strongly_ second this. After seeing some Ubiquiti gear in use in various enterprise settings almost a decade ago I personally investigated the brand for home use and bought into some of the WiFi gear for use in conjunction with the rest of my network hardware/software.

If there were ever a requirement to allow public internet ingress or egress from this stuff directly I would immediately replace it. Self-hosting the controller is a base requirement for my use-cases as well.