@Eyes Sadly they all pretty much suck from a security perspective. My current choice, based on price/performance is the Archer C7 based on this Wirecutter review [thewirecutter.com]. For bonus points, you can load DD-WRT on it.
@Eyes neither is particularly easy to use for a typical end user. DD-WRT just makes it more useful for nerds like me. Mine is primarily used as an access point as I have real firewalls :)