I think what the parent post meant isn't necessarily security in the transport, but security in the code. The wireguard has around 4k LOC [0] and you can read

I think what the parent post meant isn't necessarily security in the transport, but security in the code. The wireguard has around 4k LOC [0] and you can read and understand it in a weekend (or faster depending on your skill). Also you not only don't have to configure the ciphers, but you actually can't. If any of the chosen defaults isn't considered secure anymore they will be replaced [citation needed]. So even thought the code resides in the linux kernel you could still reasonably well argue that it is indeed on several levels more secure than OpenVPN. Here [1] is the whitepaper for anyone who is interested. [0] https://git.zx2c4.com/wireguard-linux/tree/drivers/net/wireguard/ https://git.zx2c4.com/wireguard-linux/tree/drivers/net/wireg... [1] https://www.wireguard.com/papers/wireguard.pdf https://www.wireguard.com/papers/wireguard.pdf