If we’re talking about privacy of tor vs VPN, I want my entire network protected at the gateway, so not sure how the tor network keeps up with streaming video etc?

I wasn’t aware of the attack surface reduction, I’ll take a look at that, thanks for the recommendation.

My ground truth for this is usually to ask full-time exploit dev friends which is a harder target, although that’s probably flawed in that if you’re targeted by someone determined it probably doesn’t matter the cost.