You can filter out broadcast, multicast and other kind of link local nastyness. Also a single tunnel obscures traffic if one’s super secretive.