Which ASR should I get?

Let me preface this with: I work in a Cisco shop and it would be a really hard sell to convince them to switch to something else.

Going to be upgrading a couple of MPLS circuits and a couple of Internet circuits each at 2 sites by like 10x. It'll be 1G for each MPLS and 500M for each Internet connection, so per site an aggregate bandwidth of around 3G. There's a very real possibility of those numbers at least doubling within 3 years, and I'd prefer not to have to keep telling management "We'll need all new hardware". There's also the possibility of adding additional circuits or dark fiber in the slightly longer term future.

My budget is enough for a single ASR1006-X (redundant 40G ESP and RP) for both sites, possibly with a little wiggle room.

Would you go with the 1006X or some other solution, like multiple ASR1001X?

All the traffic must be encrypted, so it has to be able to handle line-rate IPSEC tunnels over those circuits. Currently we use a ISR4000 series for each circuit and if a router goes down, we lose that link. We would prefer to make things a little more redundant. Bandwidth needs are likely to increase, possibly every year, however I have never gotten accurate projections from the business on bandwidth needs or circuits configurations.

I feel like the 1006 gives us a lot of room to grow, flexibility on circuit bandwidth, hardware redundancy (except the chassis), etc. However a few cheaper routers would probably be able to accomplish the same thing in the right configuration.

Any opinions and reasoning here would be much appreciated.