A userspace implementation would use a lot of battery power on laptops and be less performant. Wireguard is now in the Linux kernel and does not require kernel modules. You will however require root privileges. I don't want an unprivileged user to be able to route all my traffic though some tunnel. Changing system wide routes should require root.