I run opnsense as a VM and have done for maybe 5 years now, moved across 3 different sets of hardware.

I DO have a hardware router under the ONT for if / when I feck up proxmox.

Snapshots are great when you start to play with the firewall settings or upgrades