For hardware, I also notice that there is a lot of recommendations for platforms that don't support ECC memory. PC Engines APU2 includes ECC memory, but fitlet2, Protectli, and others don't support ...
WireGuard probably won't make it into 13.0-RELEASE, but 13.1 seems very likely.