Fair point; but this is not using IPSec. It's using OpenVPN, which relies on TUN/TAP.