How does this differ from tunneling a VPN over something like wstunnel?

We've been running that in prod for several years without any issues, also going through cloudflare