You're correct, dual-WAN is wonky. Failover is sort of working on the RT-AC5300 under 384.4_2, but load-balance causes all outbound web connections to give TLS errors.
Note that load-balance was working (okay if not extremely well) under the 380 firmware series. Merlin doesn't touch the...