1. The throughput is inadequate.

2. The IDS/IPS is an inadequate Suricata instance with outdated rulesets and no SSL inspection.

3. There is nothing comparable to a WAF.

Gun to my head, I'd trust ASUS AI protect for a business router to substantially outperform Unifi's security offerings.

The ASUS at least knows what it is and what it can be: basically a glorified WAF. IDS/IPS don't even work well with up to date rulesets if they can't decrypt traffic.