I know that but don’t recommend FreeBSD for a newbie, whereas proxmox is Debian based and therefore has support far beyond what opnsense has. Plus the proxmox setup allows for far greater flexibility, at least on any level that is accessible to them.
Not even recommending against opnsense for the firewall vm.
Fully support using opnsense buuut pfsense has a good guide for doing this exact thing. It works really well.
https://docs.netgate.com/pfsense/en/latest/recipes/virtualize-proxmox-ve.html
People recommending against proxmox don’t understand how good zfs is, but their points are valid for this being a sole point of failure. I virtualize pfsense to gain cluster advantages but tend to leave not too much else on that box.
If you don’t pass through the card the VM can more easily be restored to dissimilar hardware. But those ports are dedicated to the pfsense/opnsense VM, leaving the single free port for proxmox management and VMs. I would enable VLANs for network segments but if you either don’t have switches that support tags or are new to all of this it’s going to be WAY less headache to just use it all untagged for now. (Spend time on funner things, seriously!)
Haven’t been improved in a year? By what metric are you basing that assertion?
IP theft is probably the main one I’ll concede the point on - that damage was done long ago so they haven’t “improved” on it.
But whether it’s reasoning or generation or building things… that’s a crazy take. Unless you consider them like a chatbot companion? I wouldn’t really know much on that front, I’ll concede.