udp[8] = 1 filters only handshake packets. Without it, data packets would also be sent to the userspace daemon.

I'm not sure if initial handshakes can be replayed, but since WireGuard ignores unknown clients, it might be possible.