Because it’s not the basic Wireguard part itself that’s hard, it’s the synchronized keys, NAT busting, ACLs, and other things on top of it that are. Tailscale has made it incredibly easy to deploy and use confidently and that’s why people are happy.
You're already offloading critical parts of your infrastructure anyway.
Ie i can self host most of this, but wouldn't i be hosting it on literally a $5mo VPS with a static IP to work around my homes dynamic IP?