NAT and firewall traversal are two other things that Tailscale gives you that you don't easily get with Wireguard alone, FWIW.