I have one of those as well. As a word of caution, they are dropping support for that in 2.5 [1]. Starting in 2.5, they are requiring AES-NI instructions (like I said in my other post, I am a bit irritated they did that, especially when that is a requirement for something I do not need).
The APU2 does have AES-NI so no need to worry.
Mine is active and working (I use it with OpenVPN right now).
Updates are easy to manage, I use Pfblocker which is similar functionality to PiHole, and have cloudflares DNS (1.1.1.1) set up.
As for wireless I attach a Ubiquiti AP through a switch.
I've done this at a couple different sites for relatives and it's comforting to know there's some semblence of security and privacy for them.
[1] http://www.pcengines.ch/apu2.htm