Welcome. You have come to the best community on all of the internet. Merlin has many years of effort into his additions and because this is 'mature' software, you can imagine that most every question has already been asked and answered a number of times in this form - even if they are not specific to his fork, but to the underlying AsusWRT GPL version his is based on.
Search is your best friend, but so are the members of this community. My $0.02, once you put his latest version on - as of this post, v386.3_2 - you should do a full reset, followed by the minimal config, get your basic network functioning, save your config. Then move to your VPN config.
My humble recommendation is:
Start clean - Upgrade and then reset to factory with the initialize option checked
Follow, L&D's Minimal Configuration guide (look for guide)
Make sure you use fixed channels and turn off those 'features' in the Professional section of your Wi-Fi bands that best practices. (Many posts)
Run amtm from the command prompt, set up entware. You'll want/need a good quality USB drive for its installation point. (Many posts)
For my personal choices AND opinions, which differ from some on here...
Don't go crazy with addons - install only what you really need. I ONLY use scribe, connmon and dn-vnstat.
The Trend-Micro engine and features are not really a privacy concern and they don't slow down the device, use them.
Don't use any QOS unless you really need to - try without it first. Use speed tests and Buffer bloat tests. If you need, stick with 'Adaptive'. Anything other than adaptive shuts off the hardware acceleration, severely limiting your performance.
I use SmartConnect. It works very well for me. (I also use AI Mesh 2.0 but you only mention 1 new device)
All that, I don't use VPN at the router level but that's something I'm starting to think about.
Your choice of the AC86U was good because it has CPU features which accelerate VPN performance.
Good luck. As I always say, YMMV.