Not only the attack surface, but it wasn't until I tried migrating everything from pfsense to OpenBSD (firewall, dns, vpn, etc..) and started digging around did

Not only the attack surface, but it wasn't until I tried migrating everything from pfsense to OpenBSD (firewall, dns, vpn, etc..) and started digging around did I realize how many scripts and processes are involved in managing pfsense's state. I ended up giving up and starting with OpenBSD from scratch and it didn't take me more than a couple of hours to get everything back and operational (wife tested and approved). I'm sure there's a rhyme to their reason for such a setup but I'm extremely content with the relatively few files I manage in vim with my own versioning, upgrade and backup methodology. I do admit that I sometimes miss the odd graph or html report but I'm getting more used to the logs.