It depends on how interested you are in security. The stock firmware is based on 10 year old Linux kernel 3.4 (which is already way newer than the 20yo kernel 2.6 that most AC routers use), while DD-WRT for the R7800 is now based on kernel 4.9 and OpenWRT on the still-currently-supported kernel 5.15. If you think Windows XP on the internet is fine "if it's locked down enough," then an old EOL kernel in your gateway may well be good enough for you.
Given that the wifi radio drivers are recompiled for newer kernels using automated tools, it's not surprising that often 3rd party firmware can have worse wifi performance than stock. That can be a fair tradeoff for better security and modern features such as WPA3 which Netgear can't be bothered to backport to firmware of older models. After all, WPA3 is only required for Wifi 6 certification.
Heck, plenty of people will use OpenWRT on Broadcom devices which have no available wifi drivers at all, or else limited to only G speeds (now rebranded Wifi 3), just for the added security on a gateway. They use separate APs.
The R7800 is kind of an odd duck in that it has two dedicated 800MHz NSS cores to do hardware acceleration, and OpenWRT support for them has always been experimental so it has never been folded into the mainline.