Small ARM/ARM6464-based MT-device and then a ZeroTier “OOB” network ?
No hassle with launching VPN’s etc. Its always “connected” via the cloud-switch. (zerotier)
This thing has serial ports ? Alternatively you can just use the “ethernet” ports no ? 1 cable to RB4011 en 1 ethernet to CRS328-24G-4S+ and make the appropriate IP-config.
RAM should be ok to run ROS7, so wireguard is no problem.
Flash might become thight.
In the same line, I’ve used SXT LTE with ROS7 and wireguard without any problems. No USB, no serial, no wifi, only 2 eth ports.
But both are not ARM, so no zerotier.
If it’s for indoor use, AC3 LTE ? No serial.
Be advised though you can not use wifwave2 drivers on that device.
Audience might be another option then.