You absolutely must secure your home router and you probably can't

[anotherone]

@LockeCJ

Apropos of nothing, but does anyone know why my pfSense box would be talking to the internet at 1Gb, but to my internal network at only 100Mb?

Check the make and model of the LAN side NIC? Is it on the PFSense (BSD) supported device list? Most NICs will work but the driver situation can be a bit buggy for the ones that aren’t on the supported device list.