At some degrees, AiProtection inpsects the traffic and it does affect the overall network traffic ingress & egress! Beside, it does utilize the resources of the routerI don't know about privacy, but AiProtection doesn't cripple 500Mbps ISP at all on RT-AC86U. Shouldn't affect RT-AX86U as well, the CPU cores are the same. This is not a true IDS/IPS, but some sort of lightweight router optimized... something. True IDS/IPS like Snort/Suricata needs multi-core i5 CPU.

Install Home Sophos, pay for premium, turn on Windows Firewall to block in&out port and application uses on the workstation PLUS install Microsoft Defender Application Guard (now available for Edge Chrome) ...