But the very nice thing about ESP (over UDP or not) is that it's much simpler to build HW offload than for TLS.

Using the long ago past as FUD here is not useful.