This sounds like normal FW stuff to me... Palo was just up-selling.
They also tried to steer me away from doing local instances of globalprotect in favor of their prisma cloud
Yeah, if I had a global workforce, that might be nice, but damn, I just need a simple VPN to the office/colo.