I’m wondering how many people are going through the code? Also Mullvad is an open source VPN but they require access to your private key for generating a WireGuard config, there's no option to generate it solely with the public key. Consequently, they have the capability to monitor your traffic in plaintext in every scenario. But we are being shared Mullvad all over across under the claim “open source” 

 Mullvad does not need your private key to generate a wireguard config. They do not need your private key for anything.