Netgear Armor - How does it work?

I’ve been using my Orbi system for about three years with my ISP router pointing in DMZ mode to the Orbi which handles all of the routing. I can’t replace my ISP router or put it in bridge mode.

My ISP is offering enhanced parental controls (similar to Circle Home Plus) but in order to do this I have to let my ISP router and do the routing. This would mean I would lose access to Netgear Armor, which is up for renewal in a couple of weeks.

I’m just wondering if anyone has a clear idea of how Armor actually works as I can’t find anything that is entirely clear. Basically, is it worth the subscription cost? Does the on-board antivirus literally extend to just DNS phishing protection (which my ISP router can also do) or does it actively scan and protect devices on your network from viruses? If someone connects their laptop to my network would Armor prevent my network from spreading a virus without having to install the Bitdefender software? Does Armor actively scan and block IoT devices for attacks or does it simply do a vulnerability scan? I can’t seem to find answers to any of these questions online.

Thanks in advance!