> which can be turned off on the paid product

Actually it can be turned on, this feature is opt-in.

> I wish I knew if you could run vanilla OpenWRT/LEDE

It's not there yet, but the devs try to push anything needed to upstream Linux/OpenWRT, see this: https://github.com/CZ-NIC/turris-os/issues/50