[rebase]

True. tinc: https://www.tinc-vpn.org/ is another option for distributed VPN

But if you're ok with discovery going through master/server and then connecting directly to peers for traffic, I'd stick with Wireguard.