Wireguard makes the kernel.. and I feel particularly vindicated for pushing for its use with one community I work with.