Guidance on MQTT project

No. The issue is that to be a client, the website would have to contact the broker, which again would mean poking a hole in the firewall. If the Pi contacts the website instead, it's more secure.

That may be more of a problem, but I'm no expert. How exactly does the data get to the website today?