Or both
Problem is that wireguard ruins exposing ports once its up unless you know the secret
I don't follow. Problem for the network? Operator?