A core part of the security design of WireGuard is not negotiating cryptography.

No one suggests the negotiated mess that exists in most standards. A single binary switch to account for hardware acceleration when it's available on both ends would have been a good decision.