The striking thing about Van Tech’s test is @ 9.46: he’s not connected via WG or OVPN when running a H/W offloaded test. What kind of VPN rates to do you get when offload is disabled?
I think it’s also worth mentioning that Nord puts their own ‘flavour’ on WireGuard… & call it NordLynx. It’s enough of a reason I stay away fr 'em. You might want to consider a 30 day period of a ‘pure WG’ provider just to remove that variable but as always, YMMV: