it's a mesh network built on wireguard. it's not just a direct connection to another PC on your network. you can select exit node devices on the fly and control acl's and access based on groups in their admin panel.
and yes, if you want a properly secured vpn setup without the necessary background knowledge, it's pretty difficult. there is no opening ports on your router, which is especially useful for people on cgnat.