Hey James,

You're quite mistaken. WireGuard is layer 3 only.

Ethernet
IP
UDP
WireGuard header
==================
IP
Payload

Everything below the line is encrypted.

Jason