The devices we are talking about are for small-scale networks. For example a small branch office, a small office or a home office. Such networks may only have a few pieces of network equipment, a router, a switch and some WiFi access points. It makes sense to use the router to route between networks given the (fairly) small volume of traffic between most networks and the (relatively) few users.
Despite such networks being small, I’m a big advocate of segregation. I use a wired network (GREEN) a the wireless network (BLUE) and would like a wireless guest network (currently I have this segregated in the wireless network equipment as guest devices don’t need to talk to other WiFi devices). I also have an IOT and/or printer network (I use ORANGE - but with very restricted internet access). Some people even go further and a “black” network for the network equipment itself (the management interface for the switches and WiFi access points which don’t need internet connectivity (as they have alternate ways of installing updates).
In this design the IPFire box becomes a single point of failure, but so is the Network switch. I’m talking about small scale here, not a large business.
I should also add that I have colleagues who have avoided IPFire because of the limited number of networks. They have small test labs in their home and needed multiple networks for testing, not for security reasons.
I’m not sure why you think MiniPCs won’t also last for years
While they seem to have infrequent firmware updates, I understand that the attack surface is small. Sensible people don’t run risky/untrusted code on their firewall PC and these devices do not have baseboard management systems (for example).
@ms
I think it would really help if you were upfront about what you (and some of the core developers?) do for a living. I understand that you do consulting work regarding IPFire and you sell these appliances. That’s great! People will understand and respect that. They may choose to support the project through using your business or buying your appliances.
You can always argue that regardless of the technical merits, the appliances you sell are likely to be easier for people to use, because they’re well tested by you and your team.
EDIT: Improved clarity