I couldn't possibly care less about Bell's "Apps" but VOD is used quite often.
Well what I've done in the meantime is drop my FW in the DMZ, which works very well actually. IPSec and SSL VPN works fine. I have IPSec working from my PA firewall to a Fortigate at my colo, and client IPSec and SSL VPN works fine inbound to the firewall. I am a little surprised it was that easy... usually IPSec gets upset when NATed.
So in and out work great, and I get full speed. I still use my own VoIP solution which needs a public IP as well, and that I can't get from Bell so I am keeping a basic Rogers cable internet service for now. Oh well, it's useful for redundancy.
Rogers is piloting fibre now as well though. 250 / 250! And if it works anything like their cable modems and they come to my area, Bell will be gone VERY quickly.