I would add to your article that Wireguard uses the Noise Protocol Framework http://noiseprotocol.org/ . Personally, I am creating an "identity" layer replacing the vanilla use of keys of wireguard with digitally signed blockchain tokens, called Cableguard. Check it out! :)