I think it's also worth looking at mikrotik. I run a HAP ac2 for travel which is small, has dual Wi-Fi radios, and enough power for good speeds on IPsec VPN. It also supports wireguard.

They also have a tiny, less powerful unit (mAP) that may fit with some travel use cases.