> It's just a simple l3 udp tunnel

Wait, isn’t UDP L4? Am I missing something?

Wireguard is a L3 VPN that uses UDP (L4) for tunneling. Thats probably what was meant.

Yes, but it tunnels arbitrary IP packets encapsulated in UDP.