One of the most notable changes is wg(4), an in-kernel driver for Wireguard vpn communication. It is a complete reimplementation of wireguard so there's nothing gnu licensed in it.