IPSec pros

IPSec is a cross platform standard

Can use opportunistic encryption (OE)
Relies on DNS for public keys, unfortunately

Will continue to be supported
No need to learn something new in five years.

Can support new algorithms

Doesn't suffer from TCP over TCP meltdown