Comment by lxgr

It has excellent built-in NAT traversal (almost always peer to peer via hole punching etc., with relay nodes only when everything else fails) and a point-and-click management plane (but also powerful ACLs if you need them).

The former is mainly what I use it for. Being able to SSH to a Raspberry Pi behind sketchy triple-NATted hotel Wi-Fi or being able to use an Android phone in a different country as an "exit node" for online banking (many banks hate commercial VPNs) is very neat.