IPSec is terrible, huge, and messy standard that company that made it took 20 years to stop getting CVE every year

But the very nice thing about ESP (over UDP or not) is that it's much simpler to build HW offload than for TLS.

Using the long ago past as FUD here is not useful.