I have always preferred your second option. I've used a MitM Squid SSL Bump proxy in the past to strip all but known required headers and browser addons to red

I have always preferred your second option. I've used a MitM Squid SSL Bump proxy in the past to strip all but known required headers and browser addons to reduce data transmitted. It is hit-or-miss these days as CF will assume I am a bot for not transmitting all the extra fluff so I only use that with sites that are not behind CloudFlare.