The Tech Behind Our New VPN (with easy graphics) | Simplified Privacy

Simplified Privacy describes a "browser-only WireGuard" design that routes a browser's traffic through WireProxy and isolated artificial network configuration files, avoiding the root access that regular WireGuard requires. The article says WireProxy runs WireGuard through a SOCKS5-style proxy without root access or direct access to networking interfaces, and that Bubblewrap sandboxing is used to isolate those configuration files so applications treat the isolated local proxy as a system-wide proxy. It contrasts this with Portmaster, which the article says requires persistent privileged kernel access, and states that Simplified Privacy aims to be lighter and faster than virtual machines.