I think these setups are fantastic. Here [1] I wrote about my IPSEC-setup on a portable private Wifi network based on a Protectli that I connected to someone's Wifi.

[1]: https://du.nkel.dev/blog/2021-11-19_pfsense_opnsense_ipsec_c...