Just make sure to either set the Wireguard profile’s IPv6 to Link-Local or disable IPv6 on your network connection, otherwise you’ll leak data and DNS entries over it. The reason is because Proton’s wireguard implementation does not support ipv6 yet.