> k8s already uses Wireguard for the service mesh internally.

No it doesn't. There are some CNI plugins that use Wireguard, but it's not standard in any way (like any other network plugin, really).