I think that’s the CPU limitation of the hex. I was also surprised by WG speeds on a hex. It’s because WG traffic which is also encrypted, needs to be processed by the CPU. Offloading your WG tunnel onto another device, or getting a more powerful router/CPU should solve this
same thoughts here. thinking to keeping a 4thgen above intel pc with linux or windows to offload the router. This is because i have been reding that even the expensive routers still don’t have that much juice to cater todays great fiber speeds of internet for wireguard or vpn