That’s why I prefer things like Debian, OPNSense, etc. It IS hard. But that doesn’t mean that not doing it should be considered a done deal.

A multitude of router products manage to do this.