What if we just added and SD-WAN implementation to pfSense?
Both are smart strategies and well within your core competency. As long as you're not building your own SD-WAN service you're golden.
Thanks! Running our own SD-WAN service seems a lot like opening a cute little coffee shop: A fine way to spend a lot of money with no result.
There is a third option, which is also customer-centric: Allow the customer to run their own SD-WAN.