I thought that too but they are not. I discovered that recently learning and configuring wireguard.