Code audits and attack surface

Auditing WireGuard means reviewing one config file, not a sprawling codebase

A practitioner's production setup keeps the entire trust model in /etc/wireguard/wg0.conf. The line counts he leans on put WireGuard at about 6 percent of OpenVPN's core daemon, and the speed claim comes without a test.