Wireguard uses the new Network Extensions API, and that usage requries entitlement granted by Apple signature. There's no avoiding that. I've also used differen

Wireguard uses the new Network Extensions API, and that usage requries entitlement granted by Apple signature. There's no avoiding that. I've also used different VPNs that didn't require that - but they also didn't integrate so well as wg does. For Xcode, there is another way - it is downloadable from the developer pages.