FWIW, you can run a VPN (e.g. tailscale) in WSL2. I have WSL2 start up on boot and I can remotely ssh to WSL2 without logging into Windows at all.

I also have tailscale running on Windows itself and they don't conflict.