Aside from UPS’s in my rack I have a whole-house surge protector in my main panel. It took the place of the 30a circuit breaker for the dryer and protects the entire house (plus it’s still a 30a breaker for the dryer).
I’ve been using Sophos UTM for years, but they announced that it will be End Of Life next year. I have been looking at OPNsense as a replacement. It will be a very interesting transition.