While less code = less possibility of mistakes, there are more factors at play. OpenVPN is often the best choice for most people, especially people who don't kn

While less code = less possibility of mistakes, there are more factors at play. OpenVPN is often the best choice for most people, especially people who don't know what they are doing (who else needs a front end). HTTPS, while seen as a liability in case of IPSec and therefore avoided, is actually good for OVPN. OpenVPN traffic, if set to tcp/443, can pass off as HTTPS traffic, in most cases (except for DPI). I've had problems with IPSec since it operates at a different layer and sticks out like a sore thumb. In environments where the network manager doesn't appreciate VPNs, IPSec is useless. Better security is important, but not when it comes at a steep cost of not being able to use it when one needs it the most, a not-so-friendly network.