I've noticed that the DoT/DoH feature doesn't work well if IPv6 is enabled, apparently this feature only works properly with IPv4. so if you want to use this feature, you will have to disable IPv6 otherwise your dns query over IPv6 will leak, sent unencrypted and your isp can hijack it.
 

Next is the AP isolation feature. This feature is supposed to isolate all device from each other, but it doesn't work like that. Basically only device connected to the same band cannot communicate with each other but the device connected to the other band so, for example device connected to 2.4G can talk to all your device that's connected to other band, let's say 5G just fine. So what's the point of this feature. If you actually want isolation you will need to disable all the band and you can only have one enabled, you cannot have 2.4G while having 5G enabled if you want the isolation. Supposedly there's a workaround for this you just have to enable band that you think you don't use it often but don't use it yet, because you will have to use the guest network feature instead. so basically if you want to enable 2.4G while having 5G enabled and you also want isolation you will need to enable the main 2.4G but don't actually use it then enable the guest 2.4G and use the guest network you've just recently enabled instead and now you will have a proper isolated wifi but as a side effect, you would be wasting airtime and can't use with easymesh because guest network doesn't sync to other easymesh device. 
 

so basically ap isolation that you think it will work like this:

but instead it works like this without the workaround: