Alright so I see everyone recommending router setups for 'whole network' coverage. Makes sense right? One device protects everything. But I'm sitting here late thinking about the actual trade-offs and it feels like we're ignoring some huge cons for a minor pro. Remember when you had to flash DD-WRT on a Linksys to get OpenVPN working? That was the era. Now most routers have native VPN client support but the performance hit is brutal. My Pi-VPN tests showed a 40% speed drop on WireGuard through the router versus just running the app on my laptop. And forget about per-app split tunneling, everything goes through the tunnel whether you need it or not. The big pro is always 'protects all devices'. Sure. But my IoT fridge doesn't need a VPN, my smart lightbulb doesn't need encrypted traffic to China. We're sacrificing speed and granular control for coverage we don't actually need. The app approach lets me secure just what matters - browser, torrent client, streaming app - without tanking my entire connection speed. Just feels like router VPN is an outdated solution for a problem that evolved.