+1 for Mikrotik.
Get one of their routers that have an Arm or x86 processor and you can run PiHole and a DDNS updater on there as containers. Wireguard support (client and server) is built in.
Even their cheapest hardware that runs routerOS has access to all the same features as their enterprise level gear.
The X in .docx is for XML. MS Word files have actually just been zipped XML files for years now.