> Tailscale

I'd recommend this alternative that doesn't require a 3rd party - which is one of the reasons to implement wireguard over a traditional VPN:

https://github.com/subspacecommunity/subspace

I am sure I wouldn't use a service that can literally get into each and every device of my private network if they want to or worse, they get hacked. Each and every device in the network automatically accepts whatever public keys and endpoints that get advertised by their servers and automatically connect to them. It's not only an overpriced mediocre product. From a security perspective, it's the most dangerous SaaS service I've ever seen.

My biggest fear is once this company gets tied to WireGuard and the security disasters come out, WireGuard's fate will be tied to a mediocre commercial product that put money above engineering decisions.