Tailscale tells us that, at least on some hardware, wireguard-go userspace performance beats the in-kernel implementation?

https://tailscale.com/blog/more-throughput