I do use AI protection and I occasionally look at real time traffic, I tend to blacklist any sites that appear, and clear things out on a regular basis so I can see new issues and take appropriate action
I have however noticed in teh logs a lot more data about devices about devices being disconnected and re-authenticated which happen every 30 minutes or so.
Throughput still hitting expected values.
I just heard that my RT-AX89X has been shipped, so will move the GT-AC5300 to a mesh node when this arrives.