IKEv2 can be configured securely, but by someone that that is familiar with that particular minefield. Both on Windows and MacOS the GUIs configure weaker secur

IKEv2 can be configured securely, but by someone that that is familiar with that particular minefield. Both on Windows and MacOS the GUIs configure weaker security by default (the cynic may wonder why!). On MacOS you can use Apple Configurator /Apple Profile Manager and on Windows Powershell, to configure stronger security. The nice thing with WireGuard is it’s either secure or it’s off. As you say, it’s easy to misconfigure IPSec and the number of experts gets smaller day by day.