As to the wireguard thing, wireguard wont set the "dont fragment" bit.  Wireguard tries to operate as if it didn't exist, and I appreciate that.