I don't think this is accurate? The flow I've seen is "Wireguard server has its listening port open. Clients (with all ports closed) connect to the server on i

I don't think this is accurate? The flow I've seen is "Wireguard server has its listening port open. Clients (with all ports closed) connect to the server on its open port." After that, all connections can still happen. Server -> client, client -> server. > NAT Traversal: The NAT entry created by the client's outgoing connection allows the server to send packets back to the client. > VPN Tunnel: The established VPN tunnel enables bidirectional communication, allowing the server to reach the client without the client needing an open port.