[borplk]

Yes mainly because of proper PKI management overhead.

Wouldn't Wireguard work with a simple shared secret on both ends?