you can try my setup , it is pretty secure , Sophos is quite good
XG home firewall (using mini pc with dual wan, you can search zotac mini pc fanless type)
Aruba Access Point POE - 1 Lan cable is enough (1 should be enough to cover your whole house, if you deploy centrally in your house)
Smart Managed Switch 8 port should be enough