And there it is. Idk about OP but this is what tripped me up. There are many guides online, but the native documentation assumes you have a pretty deep understanding of the network stack, authentication, and VPNs.
The online guides all kinda make assumptions about your network set up and if it’s different in anyway your attempt will fail and you won’t know why; as the error codes are kinda generic and somewhat meaningless to someone without in-depth networking experience.
As far as I'm concerned, the most difficult thing I've encountered with Wireguard wasn't related to WG itself but to the fact that I'd set it up on three different systems, each with its own configuration style for bringing up the network.
Ubuntu server - netplan
Arch server - systemd-networkd (directly)
Arch "desktop" - NetworkManager
There can be many environments and situations, and sometimes a component would block packets to be forwarded from one network or user to another.
You need to know a bit about networking to debug it.