Firewall throughput is offloaded. Even IPSEC can be offloaded.
Openvpn however isn't
For non-offloaded stuff pfsense, being x86 powered , has larger throughput. But this requires hardware or virtualization host
For soho, the ER-X might be cheaper, and cost less power