Wireguard Server cannot ping LAN devices

Its behind an ONT, also no my LAN devices accepts ping. When I enable masquerading I can ping my LAN devices through Wireguard but I wanted to know if it's safe to do so.

Based on this post the author seems to say it's a nuance of some sort?