Apologies for the delay.
On the VPN termination point, you have to set the allowed IP addresses. On the case of a client, a /32 is enough. It means that only this IP would be receiving responses. A client with a different IP address would be able to inly send packets, not to get any back, thus not able to get a TCP session. I think it is enough and rhat no additional FW rule is needed.
You don't really need forwarding as you don't need NAT here.
A part of the filtering can be done by wireguard by setting the allowed IPs correctly. Just check if only one service is listening on the server port you'll allow.
This is my point: if you can't afford a server powerful enough then don't use an AI.
If you can't afford a server but use an AI you have to accept some compromises. One of those is to be spied on. The true question isn't to use AI but to accept to be heard, recorded, analysed, and perhaps used against you.
A start-up is a company which hopes to be bought by a bigger one. To be bought at the higher price, they need to have something a big company would like to have. Like data. Especially since those companies are cutting corners to reach the market and survive.
Our trademarks include Andi™, "Search for the Next Generation"™, GenAI™, "Generative AI Search"™, "Andi - Next Generation Search"™, Andi Search™, AndiSearch™ and LazyWeb™, "Deep Answers"™, "Social Search Engine™", "Andi - Radically better search"™, and "Andi - What are you looking for?"™
I use Shelter to enable the work profile. It permits to copy apps between standard and work profile. So it is possible to have google services (with an account set I mean) in the work profile.
Apps like for Banks can't be copied though. But most of the others can.
I play Blades in the Dark to try to train some friends to take decisions and accept risk.