depends on your level of knowledge or determination. there's not much pfsense can't do. you really want your wan on a VPN. can you do that with openwrt? Its been a VERY long time since I looked at it.