Wireguard is so much simpler than those other options. IPSec is a mess.