The article is a good start. For one, you cannot build it. They have some sort of proprietary blob in their toolchain so that only netgate can build it.

Between that, the massive security fuckups, and the absolutely horrid behavior from the maintainers I dumped that shit and haven't looked back.