Some of these are outdates, for example OPNSense uses ZFS too now, and isn’t based on Hardened BSD.
I have mine configured like that, which is something I was going to write a guide about OPNSense split tunnel guide with VLANs · Issue #1863 · privacyguides/privacyguides.org · GitHub