if that's your major concern, look into just using plain wireguard. It's what I run on my server/desktop/laptop and it works great.