Comment by CursedSilicon

They probably use L2TP with IPsec to get Layer 2 transit. Doing that over Wireguard would require Gretep or something similar