Replace BT Smart Hub 2 with netgear R7000 router

[gg30340]

If all you want is to extend your wifi buy a wireless access point (WAP) and use that. They are more or less plug and play.

[Jake12]

Device specific vpns don't really guard against 'device to device talk' e.g. your non VPN TV comms with your non VPN router back to your VPN computer. Ie your are less protected compared to a VPN on the router itself

[licquorice]

@Jake12 sorry, but you clearly have no idea about what you are trying to do and how to achieve it. one minute you are wanting a router with VPN capabilities, next a simple wireless access point. No idea why on earth you think you need WPS for telephony.

At this point I'll leave to it 

@Kimberlin but the OP wants a VPN on his local router rather than a device whilst out and about. Entirely different scenario.