How to make exceptions for devices, where wireguard is standard?

You can also so the inverse, if it takes less rules to implement (this depends on the number of networks you created/exceptions you desire):