So assuming you do 99% networking with OPNSense - what Switch and AP?

[SecCon]

I enjoy your posts. Nice read all of them.

As for SPoF, the day I can get (afford) two separate fibers from two separate ISP's, I might invest in more redundancy. I have very little downtime.

Now, self-inflicted down time do not count as down time, it counts as maintenance time. 

[SecCon]

Following up on this I have gone with Ubiquiti's EdgeMax Switch and Router. 
Going to keep device / role segmentation in this and installing OPNSense on a small 9" deep SuperMicro SuperServer with low power profile. 

Trying to get in to the Mikrotik way of doing things was a bit of a nightmare so i sold all that and went back to EdgeMax.