Interfaces for only certain devices

Looking to implement an interface, firewall rule(s), route for certain devices to establish a connection to a commercial VPN provider. The provider has the ability to configure with Wireguard. I have tried in the past, but all traffic using the interface was using it and it was causing issues with streaming services and work laptops. Ideally a select set of devices would use this interface while others will use the normal ISP public IP. Would creating a separate interface with peers I choose and then give them static IPs?

would https://openwrt.org/docs/guide-user/network/routing/pbr suffice ?