Honestly, It depends on your threat model. Some basic steps of security your network are more than enough for most people.
Assuring your endpoints are always up to date
Assuring you change the default SSID name and Password
Assuring you disable all features you dont utilize
If you're worried about the company viewing your data on the router, utilize a device level VPN or set up a router/Box that all traffic goes through before you hit the router (As others have mentioned) with a standalone AP and router/model so you can VPN before any traffic hits the router.