Bad news: my router is still unstable and the NIC or the PCIe controller fails every few weeks for seemingly no reason, locking up the whole thing.
Good news: systemd's hardware watchdog support works really well, and when my router's NIC crashed last night it ended up causing unavailability for less than 1min as the whole device rebooted after being frozen for 30s!
(https://github.com/delroth/infra.delroth.net/commit/1302f8fb67c8b3df720fa388f402902270f04a7d)