I believe the new HH4000 has a single 10G Ethernet port, so you'd need to hookup your own 10G switch to it as the onboard switch ports are all 1G. Even the old HH3000 supports 2.5G on the WAN, so I suspect they'll bump up the speeds and get rid of the 150 and 500 plans eventually.
No throttling or such with Bell, only port 25 is blocked inbound that I know of. That's to prevent people from running mail servers that send out spam. Whether or not you want to use VPN is up to you, obviously it won't be as fast, but you'll gain a bit of privacy.