It’s a bit more than sugar. 1. 1-command (or step) to have a new device join your network. Wireguard configs and interfaces managed on your behalf. 2. ACLs th

It’s a bit more than sugar. 1. 1-command (or step) to have a new device join your network. Wireguard configs and interfaces managed on your behalf. 2. ACLs that allow you to have fine grained control over connectivity. For example, server A should never be able to talk to server B. 3. NAT is handled completely transparently. 4. SSO and other niceties. For me, (1) and (2) in particular make it a huge value add over managing Wireguard setup, configs, and firewall rules manually.