Having used an R7000 for the last year, I have some comments. Keep in mind, first, that the Netgear stock firmware is as simple as they can make it. And there is no telnet login to the router easily available.
For example, while you can set your time zone under Advanced -> Security -> Schedule, you cannot do anything with ntp or time servers. This part just works for me.
I don't think that you can turn off WPS completely. You can disable the WPS PIN under Advanced -> Wireless settings, which is the basis for the old Reever wireless security exploit. I think that's as good as it gets. There is also a reference in the user's guide to "detecting suspicious attempts to break into the router’s wireless settings by using the router’s PIN through
WPS." Which suggests that they've fixed that exploit, but I don't use WPS myself, so just leave the PIN off.
For wireless settings, I generally pick a specific channel on the 2.4GHz. band based on what I see with inSSIDer or WiFi Analyzer. That tells me what's going on around me with other's wireless networks. I also enable "20/40MHz. coexistence", and set the channel width to "up to 600MHz.". I have an external USB adapter on my desktop that's an N900 adapter, so I get the full 450Mbps that way. If you only have a 2-stream wireless-n adapter on 2.4GHz., then the setting that you have is fine. And, of course WPA2/AES is the right security to use for maximum throughput. And leave WMM enabled, as well.
For 5GHz., I have a client with a wireless-AC adapter that connects at 867Mbps, so I use the "up to 1300Mbps" channel width. I also pick a channel, usually 161, since that channel has worked well for me. The lower set of channels used to be lower power...don't know if the latest firmware has boosted that yet, or if the lower power settings there are programmed into the radios, so I'm still avoiding them *smile*.
Also, I prefer to a different SSID for each band, so that I can control which band each client connects to. Same password, but different SSID.
For the advanced wireless settings, I use "short" preamble. And leave the"beamforming" settings enabled. I do turn off "Airtime Fairness", though, I don't need it and I try to turn off what I don't need (like UPnP).
I guess that's about it. For resources, there is a Netgear forum that has a separate sub-forum for the R7000:
http://forum1.netgear.com/forumdisplay.php?f=153
That's a peer to peer user forum, but lots of good questions and answers there.
Enjoy your R7000, I really like the performance I get from the one here.