Wireguard ships with the Linux kernel so you only need to receive ~60 bytes of configuration information.
Wireguard is also easily censored and is already censored in the places that censor VPNs.
The user-facing software is not included in the kernel, but you need that to configure wireguard.
Is that true? I thought wg-quick etc were just convenience functions and that it's relatively trivial to use iproute2 to configure a VPN link
You don't need wg-quick. You do need the "wg" command.
Wireguard is also easily censored and is already censored in the places that censor VPNs.
The user-facing software is not included in the kernel, but you need that to configure wireguard.
Is that true? I thought wg-quick etc were just convenience functions and that it's relatively trivial to use iproute2 to configure a VPN link
You don't need wg-quick. You do need the "wg" command.