My cost used to start at about R5.5k but I have shaved R1k off the cost on the latest shipments. That includes Intel CPU, intel ethernet controller, power supply, SSD, and memory.
The ports are all gig but the spec of 400mbs is for AES encryption offload which is the VPN/tunnel throughput. It will do a ookla speedtest at minimum 950mbs. That is the normal router/FW throughput. Sometimes you find the encryption rate listed separately on products but mostly its hidden. Its the Intel AES chip
https://en.wikipedia.org/wiki/AES_instruction_set and at what rate it can do the encryption but in a home environment that might not be important. Any consumer router regardless will max out the CPU to 100% when encryption is enabled and be a dog incl. the mikrotiks because they don't have AES.
The rack one does encryption at 2.5gbs and the ookla speedtest is 10gbs when a SFP+ is used.