I have run Fresh tomato for years now but I ave also run DDWRT. The original manufacturer gave up security patches long ago for my router and many critical vulnerabilities have been found since now unpatched. Tomato is kept up to date and patched and with all the recent features of a much more expensive class of router than what mine came with.

It’s superior in features but it’s also much more secure.