update: I think not only the handshake packets contain a recognizable pattern. look at “Subsequent Messages: Exchange of Data Packets”

www.wireguard.com/protocol/

especially if the receiver/sender_index and the counter are what I think they are.

also have a look at this page: www.wireguard.com/known-limitations/