Where to deploy self-hosted agents

Hi, In a hub-spoke architecture where is the best place to deploy self hosted agents? I think the best place would be in the hub in its own subnet unless you plan using ephemerals pipelines?

Am I right?