Not necessarily me, hopefully…
You already have a switch. The firewall would sit between the switch and the ISP box, as a transparent filtering bridge (video for OPNsense in this post). And a mini-PC with at least 2 interfaces is just fit for the role.