I am actually managing a bunch of locations with only 1-3 people at each. Full firewalls feel overkill but maybe there is a middle ground. I’ve actually considered openWRT with ansible but keeping openWRT updated is a pain in the ass.
For now I’ll just stick with Tailscale and some sort of management software.