The main strength of WireGuard is that it’s simple. It’s like 10% of the code size of IPSEC.

Less code means less possibility for bugs, and is easier to audit.

In my book, WireGuard perfectly follows the UNIX philosophy of making a simple tool that does exactly one thing and does it well.