With that, Ubuntu Core 20 should be a brilliant fire-and-forget VPN server.

I'm excited for wireguard, but I'm not going to use it in production until the authors advise that it's ready for production.

Only out of abundant caution, it seems. I mean, Cloudflare is using it.

The protocol yes, but don't they use their own implementation? https://github.com/cloudflare/boringtun