Firewalla’s are great. All the features of pfsense and then some, in a fine little hardware form factor.
Heads up if you have the purple though : they had a bad hardware batch that had a soldering flaw on the lan side nic that would eventually make your upload reduce to KB/s. I replaced far too many waps before I found a thread about it and realized it was the firewall.
Replacement was simple and free, but they should have been more proactive reaching out to purple buyers.