My router runs pfSense so I don't need Pi Hole, I can use pfBlockerNG instead, which is built in.

Any old SBC can run that reliably on it's own, the parent is talking about swapping out the OS with netboot on the fly.