He/Him, Bi Furry Boi
Performance on opnsense is fine for anything you’ll be doing at home, so I wouldn’t factor that into your choice.
Features on opnsense are probably better, just due to all the packages you can install.
Do you prefer being 100% in a CLI all the time? If not I’d say opnsense, the GUI certainly makes things a lot easier when you’re not fully familiar with something and spending every day interacting with it.
This really seems like it’s just a way to get DRM onto printers to stop people from printing replacement parts or ‘copyrighted’ materials.
For DNS? It’s an alternative for that, but not for the huge amount of other services Cloudflare provides.
Is it just you that needs access? VPN like Tailscale or Wireguard is the most secure option then, as it’s not exposing any services to the internet.
Otherwise a reverse proxy in front of things like Traefik or Nginx, make sure things are automatically updated ASAP, and make sure auth is enabled on the services.
I’m not sure you can completely stop it when using their services.