Remote access to machines - one big hub or many little hubs?

Hello, i am thinking about move to RMS with my company remote access system. We are a machine builders, and we have to make remote access to our products. Can you help me decide which way is better: make one big VPN Hub for 1 engineer and 50+ devices (machines local networks) or 50 little Hubs with only 1 engineer and 1 router?

1st is nice when engineer has to connect, one OpenVPN profile > connect > that’s it (Connected to “Machines Network”), but every endpoint can “see” each other, and i dont know about performance - can that be a problem?

2nd would be better, but our engineer has to everytime download profile, and sometime he will have a 50+ profiles, and that is so clumsy.

What do you think? What would be better for us?

Maybe someone has an answer?