the little protectli box looks cool. I’ve historically used pcengines hardware with a similar stack of coreboot/openbsd/pf. might try one of these next considering the eol :( https://pcengines.ch/eol.htm