I think by pure count, the amount of space junk would go up. The pieces would just be a lot smaller.

If your router works for everything but that, I would recommend looking into Tailscale instead of a Wireguard VPN or run a Cloudflare tunnel as a service on the Debian host. Tailscale is free for personal use and is Wireguard under the hood with an orchestrator bolted on. I have done just about everything here has said at some point. I’m running a 10Gbps capable OPNSense firewall. For services outside my network I have several LXC containers with Cloudflare tunnels (broken out by service type) and I have Tailscale installed on one of my physical Debian hosts as an exit node.

If you just want access to everything while your out, Tailscale for your devices. If you want friends to be able to access, then Cloudflare tunnel. Neither require buying anything new.

Very few people actually change their SSID. The bigger point is that, considering sites like Wigle.net exist and the Google Street view cars were designed to capture all SSID data (they hired the guy who made NetStumbler, a popular open source SSID scanning tool in the early 2000’s), it’s trivial to get within a few hundred feet with just a few SSID’s in an area. When your neighbor has an SSID of Comcast-12345 (aka random string), there is probably only one location that has your SSID and the Comcast one in the same location. You can change your SSID every day, but your neighbors probably don’t change theirs.