Wireguard is probably the part of the kernel I trust _the most_ since it's < 5,000 lines of code and easily audited. I don't think the alphabet boys are involved in this one.
Anything that involves cryptography has to remain suspect.
Yes, ultimately as there is no perfect and never break system. But pushing that is pointless as we need to have a safeguard now. What should it be? We can't wait for the God or Godet to come. We need a human solution.
And that might be faulty. Still, 5k lines are better than ...
It was working well before. And the Linux kernel has a history of highly pozzed, insecure RNG's that were given to the community by cryptographic "experts" as well.
It famously was not working well before, and no such "history" exists.