Found another amazing "feature" of the ISP router I have. When WAN is down (like after a power loss), it redirects all DNS requests to its own LAN IP with a page saying that WAN is unreachable. Guess what happens when a Pi with a wireguard interface on it boots up after powerloss while WAN is still down, the Endpoint IP specified via DNS is the router's IP and nothing works.