

can be configured per application
wireguard can too using network namespaces
not exclusively as an interface in kernel mode
Which devices are you people running where you want VPN/proxy but don’t have kernel permissions to run wireguard? Firefox on iPhone? Porn on wifi washing machine?
As NT-master race, had to look it up:
methylphenidate = Ritalin