SBS can be configured with L2TP IPSec, but it's not something that's very easy to implement like the built-in SBS VPN. It involves adding the Network Policy and Access Services Role. But SBS already has a lot on its plate. So the hardware VPN is a good solution.