OpnSense needs a corporate server adapter for the client workstations. Basically ZeroTier with Loopback, and Proxy functionality.
The purpose is ultimately to run OpnSense on Windows machines and have it intercept ALL traffic on the instance that the 'user' is 'using'.
It will help with blocking ads in the future.
The beast is going to use this to program your karma.