They said “no need to open any ports” but that is false. The wireguard port obviously has to be opened for the VPN to work.