Everything here is my opinion. I do not speak for your employer.
I have here a dashboard I've titled "dhcp fishiness analytics." As you can see, for this customer, the fishiness spikes to over 600 at one point.
Try Tailscale: mesh networking, centralized administration, WireGuard.