Is this a good network setup?

I know that there is a WIP for a future article about router platforms, but from the little I've read on the Github issue page and a few videos I've watched I decided to make this plan right here:

Put my ISP router in AP only mode, connect it to a Protectli Vault as my firewall, get a managed switch that supports vland (still haven't found a good one, if anyone can recommend one I'd appreciate it) and have a Turris Omnia as my wireless access point.

Is this a good secure network setup? (also once again, recs for a switch would be appreciated)