Why does $out need the curly brackets?

It does not. $OUT{wpa} would need them, though, if the file handles were stored in a hash. I use it just to make it visually more distinct from print $OUT, $data.

See <<EOF on how to make a here document interpolate variables (basically, just use double quotes when introducing the terminating string).