I suggest you try changing the allowed ip on the windows nodes as you said that was the only way to get pure wireguard working on windows