Have exactly the same setup:
It tunnels everything that is bound to the same network (see the line with gluetun within the qbittorrent container.
And for anyone using a reverse proxy: that can run against the gluetun container with the bound containers port. (edit: in OPs example gluetun:8090 for qbittorrent web)
"Being a router" is what they are good for! Even needed.
Edit to be more specific: two switches in each of the 10gbit and redundant uplink would be a setup I can see, depending on your line.
No overkill there :)