Shadowsocks to Tor: why it failed as a VPN alternative

Shadowsocks in TUN mode falls apart as a VPN replacement: broken inter-client routing, no system-wide tunnel on Windows. WireGuard ended up doing the job.