Greetings,
If you are looking for a secured hub solution, then Azure firewall deployment is must. But if you don't have spoke connectivity or central branch connectivity to internet then you can configure virtual hub routing based on your network connections.
----------
Please do not forget to "Accept the answer" wherever the information provided helps you to help others in the community.