IPSec is based on tens of RFCs with optional features (such as dpd in IKEv1) and more knobs than a boeing 747 cockpit. You get companies as big as AT&T setting

IPSec is based on tens of RFCs with optional features (such as dpd in IKEv1) and more knobs than a boeing 747 cockpit. You get companies as big as AT&T setting up IKEv1 with pre-shared keys and weak crypto in 2021 by default as that’s their template offering for site-to-sites. BUT the interoperability (when it works) and the native stack implementations (Android, iOS, Windows, MacOS) though nice for admins, is only owing to it’s prevalence in enterprise rather than any superiority as a standard.