Is keeping everything inside of a local “walled garden”, then exposing the minimum amount of services needed to a WireGuard VPN not sufficient?

There would be be no attack surface from WAN other than the port opened to WireGuard

Exactly this. Everyone focuses on how fast you can charge a phone, but 99% of the time I’m charging over night and would prefer a slower charge.

I just capped mine to 90%, if that goes well I might go down to 80.

Do you think trickle charging via wireless would be significantly worse?

I was actually thinking of using the battery charge limit feature to prevent charging above 90%. Not sure I could do 80 without an charge during the day, lol