On: Some thoughts on OpenSSH 9.8's PerSourcePenalties ...

[gosub100]

Then it would be vulnerable to MITM.

[DaSHacka → gosub100]

How so?

[gosub100 → DaSHacka]

You fool a valid sender into thinking you're the recipient, he passes you his one and done key, which you use to login and takeover.

[DaSHacka → gosub100]

You're only passing public keys with WireGuard, its asymmetric not symmetric encryption.

It doesn't matter if an attacker gets your (or the server's) public key.