Hacker News Reader

openvpn. I can provide more reasons, but that one is the absolute dealbreaker.

Wireguard is already here. And it works.

I'm a consultant and every company I work with uses openvpn with google authenticator.