HE's tunnel broker doesn't work through CGNAT, it requires a public ipv4 address to terminate the tunnel.
Oh yeah! That certainly adds value to this type of tunnel, I did not consider CGNAT defeating your efforts. The WG vpn tunnel is a great option indeed. Thanks