Yes ofc they can. The Wireguard protocol is not designed to be hidden. Interesting read: https://www.ntkernel.com/how-to-bypass-egypts-wireguard-ban/
I am using an Intel NUC with 32gig ram. Super efficient.