Careful with assuming VPN on router is automatically more secure, I've seen folks forget to disable remote mgmt or not update firmware which leaves gaps. I've spent hours troubleshooting weird configs, so I get why some prefer the app for simplicity. ever tried setting up a split tunnel on a router?