Quick tip for anyone else interested in running wireguard with this image: the default wireguard package has dependencies that will end up installing the default raspberry pi kernel, which I suspect will just not boot on a devterm or uconsole, and you’ll have to reflash your SD card.
Instead, install using
sudo apt install --no-install-recommends wireguard-tools
That should only install the wg utiity.