“wireproxy is a completely userspace application that connects to a wireguard peer, and exposes a socks5/http proxy or tunnels on the machine.”
No root, no new network interface, no routing table surgery. Point one app at a local SOCKS5 port and only that app goes through the tunnel. That is what most people actually want from a VPN. Commercial VPN apps still insist on hijacking the whole machine.