One thing about using VPNs on the phone is that a lot of mobile/public networks only allow port 80, which prevents the VPN from connecting. If CF makes a version of wireguard that can do port 80, that would be great.
As far as their bottom line, I guess this helps them sell services by having a documented number of people suckling the internet straight from the CF teat?