> I would like to offer a suggestion though from my experience, > simplifying the configuration of a device greatly increases its > security, operationally. So if users (network IT staff) are presented > with something vaguely familiar to what they would encounter in the > other equipment like cisco or juniper they would be far less likely to > make a mistake that would result in an outage or security problem. So > as superficial as this might seem to you in practice I think it would > have a large impact
This is a grand dilusion. Show me how you do the power and control that pf gives on a Cisco or Juniper. Your metaphor is like shoes vs 737. You have to prove that first; otherwise, your entire paragraph is based on false premises.
