Wireguard is probably the part of the kernel I trust _the most_ since it's < 5,000 lines of code and easily audited. I don't think the alphabet boys are involved in this one.