Expand Beyond MFA section with detailed subsections and clarify hardware key limitations

Author: piotr-bor

src/content/blog/mfa-wireguard-nis2-compliance.mdx

@@ -98,12 +98,12 @@ Learn more about our approach to **[true, connection-level VPN MFA](https://defg
 
 ## Why Build on the WireGuard® Protocol?
 
-While older protocols like OpenVPN and IPSec have served their purpose, the WireGuard® protocol offers clear, measurable advantages that make it the superior foundation for a modern VPN.
+The WireGuard® protocol has quickly become the preferred foundation for modern VPNs, offering distinct advantages that make it an excellent choice for securing network access. Its design principles deliver superior performance and reliability.
 
-* **Faster VPN Speeds:** WireGuard® is approximately 10x faster than OpenVPN since it operates at the kernel and protocol level, not the application level.
-* **Seamless Roaming:** WireGuard® is designed to handle network changes (like switching from Wi-Fi to cellular) more gracefully, maintaining the connection without interruption.
-* **Lower VPN Latency:** WireGuard® has far lower latency than OpenVPN due to its lightweight design and modern cryptographic protocols.
-* **Instant Connectivity:** WireGuard®‘s handshakes are extremely fast, allowing near-instantaneous connections, unlike OpenVPN which can take several seconds.
+* **Exceptional Speed:** WireGuard® operates efficiently at the kernel and protocol level, leading to significantly faster VPN throughput.
+* **Resilient Connectivity:** Designed for stability, WireGuard® handles network transitions (e.g., switching from Wi-Fi to cellular) seamlessly, maintaining active connections without interruption.
+* **Minimal Latency:** Its lightweight architecture and modern cryptographic stack result in remarkably low latency, enhancing user experience.
+* **Rapid Connection Establishment:** WireGuard®'s efficient handshakes enable near-instantaneous VPN connections, minimizing wait times.
 
 ## Beyond MFA: Defguard’s Broader Cybersecurity Capabilities
 
@@ -119,7 +119,7 @@ Defguard helps organizations manage digital identities across their network infr
 
 SSO functionality is another powerful feature. It simplifies the user experience by allowing employees to use one set of credentials to access multiple applications, reducing password fatigue.
 
-By integrating with external OpenID providers or using the built-in IdP based on the **[OpenID Connect standard](https://docs.defguard.net/features/openid-connect)**, Defguard creates a secure and user-friendly authentication experience.
+By integrating with **[external OpenID providers](https://docs.defguard.net/features/external-openid-providers)** or using the built-in IdP based on the **[OpenID Connect standard](https://docs.defguard.net/features/openid-connect)**, Defguard creates a secure and user-friendly authentication experience.
 
 ### Hardware Key Management