I feel that for a 10g internet setup now, and looking at what is offered with the various plans, that to have some room for upgrade mobilty , a pfsense/opnsense/openwrt PC based router with a managed switch, and access points is the more sensible setup. That way, you can always mix and match and upgrade according in the years to come. But this option does add complexity and it can be daunting
Depends on how you look at it, I find having to live with the constraints of the all in one router to be more daunting. And not just for 10G plans, the issue has been there since cable internet days, but is vastly magnified by requirements of XGS-PON. And once you got used to the flexibility and upgradability of software firewalls you would avoid the all in one routers like plague.
Among the issues :
1) Cost of decent routers are very high and has significant limitations
2) In many case the ideal location of the switch/firewall in the DB box, but the AP should be somewhere central to the house, but a router force you to have an AP in the DB which is often a poor choice.
3) Limited switch ports and rigid switch port speed in all in one routers. There is much more option available if you pick your own switch
4) AP has a development cycle that is different from switch ports, if you want to upgrade the wireless function in a router, you replace the entire router.
5) Firewall / router function in all in one router is generally primitive compare to software firewall
6) Keeping all in one router firmware up to date is heavily dependent on the manufacturer, and support tend not to last very long. Software firewall are supported much longer.
7) If you want to upgrade a 2.5gbps router to 10gbps, you throw it away and buy a new one. On a PC, you buy a dual port 10gbps nic and swap it out, not to mention dual port 10gbps nic are relatively affordable due to retirement of server nics.
8) If you have complex configuration in the firewall/router, just migrating that to a new device is already quite daunting, and everytime you change the device you need to do that. On a software firewall, what you do is a back & restore, and the frequency you need to do that is much lower.
If you keep a single LAN network, you can do without a managed switch, PC firewall with dual NIC, one as WAN, one as LAN, LAN goes to unmanaged switch. Connect up the AP (or a router running in AP mode) and you are done.
Hypervisor & managed switch allow more flexibility & capability, but not a requirement, but that does limits the location of the firewall.