WireGuard in itself works via UDP. I've tested base WireGuard without persistent keep-alive on CGNATted mobile networks and CGNATted fibre lines. Works fine surprisingly.