Well, this is what I have believed, but I can't make work wireguard for my setup:

https://serverfault.com/questions/1098093/how-setup-wireguar...

The combination of wireguard + firewalls and the complexity of iptables is not intuitive at all...