It has excellent built-in NAT traversal (almost always peer to peer via hole punching etc., with relay nodes only when everything else fails) and a point-and-click management plane (but also powerful ACLs if you need them).

The former is mainly what I use it for. Being able to SSH to a Raspberry Pi behind sketchy triple-NATted hotel Wi-Fi or being able to use an Android phone in a different country as an "exit node" for online banking (many banks hate commercial VPNs) is very neat.

I have machines on 3 cloud providers and 2 sites that talk to each other via it, plus a seamless mobile experience. It sets everything up for you, zero hassles.