@gnirtS — one angle worth adding: the server side.
While op24 firmware catches up to AmneziaWG 2.0 client-side, you can already run an AWG 2.0 server today with amneziawg-installer (bash, one command, Ubuntu/Debian + ARM — Raspberry Pi, Oracle Cloud Ampere free tier, Hetzner CAX arm64). When op24 eventually ships the 2.0 client, you point firmware at the same endpoint — no server migration.
The op21 beta you're on speaks AWG 1.0. The installer generates AWG 2.0 configs by default (H1-H4 randomization, S1-S4 padding, I1-I5 CPS), but you can drop to AWG 1.0 wire-compat by clearing I1-I5 in /etc/amnezia/amneziawg/awg0.conf and re-running manage_amneziawg.sh regen CLIENTNAME — same kernel module, no reinstall.
On VLESS: AWG 2.0 with Jc=3 + binary I1 has been clearing mobile carrier DPI (Russian carriers — Yota, Beeline, Tattelecom, Tele2 Moscow). Not the same layer as hotel default-deny over 443/TCP, but worth a shot if you have UDP egress available.