I just went through this exercise myself in the last week. I'm also wired only (rely on Unifi for wireless) and needed a router that gave me some extra features. VPN with selective routing for my media streaming devices, parental controls/scheduling, multiple WAN support (when the day FTTH actually shows up here), DPI, QOS, and of course ability to push 1gig of data reliably.
I see you have the AC86U in your list, there's an AC66U B1 which is the exact same router except with AC1750 vs AC2900. Since you're wired anyways, save some money there. That's what I ended up picking up at MemEx.
https://www.memoryexpress.com/Products/MX66159
It's supported by the AsusWRT Merlin Firmware which adds a few cool features to the stock firmware, and is regularly updated whenever Asus releases new AsusWRT firmware.
https://www.asuswrt-merlin.net
Tested it this weekend, running 650mbps of throughout, 4 OpenVPN connections that selectively routed to my 4 different Apple TV's, and no issues. 70% CPU on core 1, and 20% CPU on core 2.
Cheap and does the job perfectly. The AX3000 bumps processor up to 3 cores and more speed per core, but for a simple use case don't really see the need.
I'm really impressed at how well Asus routers handle some of these non trivial tasks. I looked at Unifi USG and some Cisco routers and it's pulling hair trying to accomplish some of these things, such as selective VPN routing.