I wouldn't recommend the average consumer get a consumer router, full stop.

Even if it has automatic security updates, you can bet that as soon as the thing's discontinued, the updates will be too...

I agree. Not to mention that it's very, very hard to find a router that's aimed at the consumer market that is actually good.

What are you recommending to the average consumer then? Assuming the average consumer is unable to use a web-based config UI, or to pay anyone to do configuration for them.

I'd probably offer to buy them a Mikrotik Routerboard and set it up for them.