If you've been burned by WireGuard meshes in real infra

If you work with Kubernetes, Docker Compose, multi-cloud, or hybrid setups, I’m curious what’s the biggest failure mode you’ve hit with Tailscale/NetBird/ZeroTier/WireGuard meshes?