Somewhat inevitable if the firewall on the client's end is restrictive and disallow UDP, which is one reason the project exists and why WireGuard doesn't cut it for some.
I understand, but you are still susceptible to TCP meltdown. You need to alert users to the risks.
Is there going to be a section that explains the encryption method used?
Does this program protect against buffer overflows? i.e. safe to expose to the world or does it need port knocking?