I hear you. While I prefer limiting the lines I run, I understand why people want more. Frankly, I greatly prefer hard-wired to WiFi, but ultimately surrender to the convenience. WiFi and the firewall are your two most likely means of external attack. Following best practices for securing WiFi should keep all but the most determined out. For the firewall, keep the rules simple and easily parsed should keep you safe. If you do allow remote access, do so only via VPN. Unless it’s absolutely critical, I wouldn’t even allow remote access.
One final thought, if you’re wife is working with patient medical records be sure to review HIPAA Technical Safegards. You might even consider putting her computer(s?) on a dedicated network that is more tightly locked down. Just remember that more security tends to equal less ease of use.