Wireguard works great, but it will not do NAT traversal as opposed to #Tailscale, correct? My understanding is that NAT traversal likely requires a coordinator of some kind, and this is the main function of Tailscale. What I am concerned about with Tailscale is the meta data they collect and if this can be turned off reliably with the Android client if using a private #headscale server