(user deleted)

If you are going for a "native" addon. I would have thought you would build an add-on that would embed wireguard into RDM.

I have not done this myself so the following is speculation but by embedding wireguard you should avoid the need for passing files or command line arguments to external applications.

For information on how to embed wireguard I found this, it looks very useful:

https://www.wireguard.com/embedding/

Some people may still want something that integrates with the external application but by embedding it the addon should be much more secure (no external credential passing), quicker (RDM will have the exact status of the VPN so no waiting for timers/delays and then assuming it worked) and reliable (RDM will be working with a known version of wireguard that devolutions implements at build time, not whatever crusty old version is on the end users PC).

I believe I read somewhere that wireguard is meant to be embedded into other applications to provide more end user friendly features that the wireguard devs don't want to focus on, they just focus on making a good slim VPN.