I'm not sure where you're quoting "too hard" from; it doesn't occur in the comment you're replying to or in the WinTun site. The complexity folks are referring

I'm not sure where you're quoting "too hard" from; it doesn't occur in the comment you're replying to or in the WinTun site. The complexity folks are referring to is the volume of code, number of config options, and the equivalent increase in "wrong but functional" ways the code could work. As an end user, one of the worst possible outcomes is that I set up a VPN and the tunnel works for my traffic, but due to an error on my part or a bug in the code, the connection is not secure. Wireguard's codebase is designed to be small, easily auditable, and expose the minimum necessary config choices. This is specifically to guard against these risks.