I’ve got a Mikrotik that’s connected to Proton with Wireguard. It uses routing rules to control which traffic goes through VPN.

It’s pretty much “set it and forget it” once you get everything configured the way you want.