On: RFC 9180: Hybrid Public Key Encryption (2022)

[ramchip]

HPKE is only comparable to the one-way handshake variants of Noise. For a VPN you'd want an interactive handshake to get forward secrecy on both sides, like Wireguard.