In some cases it may be desirable to use a user space version of wireguard: https://www.wireguard.com/xplatform/, https://github.com/cloudflare/boringtun instead of the kernel space version.
This could be done with a optional flag and different image base to allow opting in without impacting current usage/behavior.