The main strength of WireGuard is that it’s simple. It’s like 10% of the code size of IPSEC. Less code means less possibility for bugs, and is easier to audit.

The main strength of WireGuard is that it’s simple. It’s like 10% of the code size of IPSEC. Less code means less possibility for bugs, and is easier to audit. In my book, WireGuard perfectly follows the UNIX philosophy of making a simple tool that does exactly one thing and does it well.