Moving to OPNsense was worth the extra effort ...

Also, apparently many Linux distros install a lot of extra "fluff" porgrams, some of which can add vulnerabilities to a firewall as well. Most router distros are stripped down and only use time-tested ...