I’ve never noticed wireguard be blocked by something, have you experienced this?

many times in public/hotel wifis. it's usually places which blanket ban UDP and allow TCP 80 and 443 exclusively. tailscale somehow manages to get a connection.