Compared to ssh, wireguard configs feel too easy to mess up and risk getting locked out if its the only way of accessing the device.