Since Wireguard uses UDP and peers only reply to a received packet if it’s expected and valid, it won’t show up in port scans and barely increases your attack surface. Tailscale and Zerotier are quite nice, but personally I dislike NAT-punching protocols.
You’re right, I apologize, my use of “infringing copyright” was too loose there. What I meant in that context is more like “stealing and then re-selling the identity and essence of every human creation to ever be made into ones and zeros”