U2F over NFC works on the NEO; I've been able to login to GitHub through Chrome with the Google Authenticator Android app. Same with Google account login on Android when adding an account to the device
I've got a GL.iNet 6416A ($23) for portable use -- it has two Ethernet ports along with 802.11n on 2.4GHz and a USB port. Pretty nifty for on-the-go use, but don't think about it if you need to hit speeds over 35Mbps.
That replaces my old modded TP-Link TL-WR703N ($35), since it beat it in almost everything. Now, I use it as a wireless bridge for an Ethernet-only device.
I've got two Xiaomi Mi WiFi Minis (150 CNY, or ~$24) as budget APs. They do 802.11ac, but the three Ethernet ports on it only does 100Mbps.
There's also a TP-Link TL-WDR3600 (free, but $60 on Amazon) that I use in another location. Works fine, and can easily hit the WAN's speed at 100Mbps. 802.11n over 5GHz also easily hits 90Mbps, which is nice. It's been incredibly stable, and hasn't went down in almost two years.
I've got a handful of other routers with OpenWRT on them, but I no longer use them for a variety of reasons. Another TL-WDR3600 I had was replaced by an EdgeRouter Lite, since it couldn't really saturate my current Internet connection (1000/500).