I have limited budget but have mostly older gen Unifi gear and they have a built in feature they brand as Teleport that if I understand right uses Wireguard under the hood. Works great for my limited use cases.

Obviously I could be wrong since I have no hard evidence but both of those feel like moves where everyone involved was having a blast the entire way through making them.