Why, is it impossible or difficult to enforce?
Not sure, that’s why I asked out of curiosity. But I would assume so; it’s very easy to get WireGuard setup on a Raspberry PI or just about any SBC. For example, you could setup a SBC with a usb WiFi adapter, travel to a state where VPNs aren’t banned, connect to public WiFi and with a little additional config (changing ports), you’re good to go.
awk