What's the reasoning behind embedding the private keys directly in the config?
Mostly convenience, since it's a "getting started" guide. I'd prefer a better way than the config file to specify devices, but unfortunately there isn't one right now. Maybe I should write a WireGuard config manager tool.
https://www.stavros.io/posts/how-to-configure-wireguard/
It's actually very easy to set up, I don't know why the official docs make it seem super hard.