Sure supply chain attacks are a thing, but containers aren’t the issue. Any package delivery mechanism can suffer from it. Its up to you to verify those containers and/or build it yourself

This is the correct answer. There are some occasional docker containers you can use that connect to your VPN for the service you plan to use

I have seen this posted a few times, but don’t understand it. Why is a wireguard config important? are you using wireguard client instead of theirs?