Wireguard is part of the Linux kernel. It is true that normally you need superuser access to modify the networking configuration, however desktop environments such KDE have ways of escalating privileges on demand.
Whether you configure WireGuard manually or using the KDE interface it should make no difference. Aside from nmcli you should be able to use the Wireguard CLI tools to inspect the VPN configuration.
I hope this helps 