I believe the issue is because both VeraCrypt and Wireguard use kernal level drivers which can't run without signing, though they can be bypassed but that isn't good for security. https://learn.microsoft.com/en-us/windows-hardware/drivers/install/windows-driver-signing-tutorial