To ensure maximum security, it's important to always use a software firewall to accompany your hardware firewall (wireless or dedicated). If that router and/or a local computer on your network becomes compromised, you will be left defenseless. I use multiple nat routers. Refer to: https://www.grc.com/nat/nats.htm
I guess I do have Win firewall enabled, so that's software. I have no concern for attempting to catch outbound traffic though. Haven't for many years now. No worries....
Just block all inbound for Home and public network with windows firewall and the router wall to on and your good to go.Keep it simple and light.
Both router and software. I have Look'n'Stop configured to work only for application filtering and Windows firewall to check for inbound.
-------------------------------------------------------------------------------- Windows wall and router firewall.
Software FW...it depends what I need and...of my mood Sometime they are old, pure FW, and sometime FW with HIPS/BB.
Wireless Router with NAT Firewall only, it is more than enough to block open ports and unsolicited traffic.