To be fair, OpenVPN was annoying to setup. But with wg-easy docker, I’d argue it’s faster to set up than tailscale and no accounts necessary. You do need to forward one port

I definitely spent a good hour setting up tailscale on my GF’s mac and had to fiddle with non-advertised cli options to expose local services from other machines. However, wireguard on a mac is supposedly harder to set up compared to tailscale