Correct — use a set.

Sets let you match many addresses efficiently in a single rule, which is ideal for multiple WireGuard peers (and works for IPv4 and IPv6 using inet family).

Now a brief practical task

Choose the best nftables command sequence to create an inet table, a filter chain, a set named wg_peers holding IPv4 and IPv6 addresses, and a rule that accepts input from that set on interface wg0 (single best answer).

Options:

nft add table inet filter; nft add chain inet filter input { type filter hook input priority 0 \; }; nft add set inet filter wg_peers { type ipv4_addr\; }; nft add element inet filter wg_peers { 10.0.0.2 }; nft add rule inet filter input iifname "wg0" ip saddr @wg_peers accept
nft add table inet filter; nft add chain inet filter input { type filter hook input priority 0 \; }; nft add set inet filter wg_peers { type inet_service\; }; nft add element inet filter wg_peers { 10.0.0.2 2001:db8::1 }; nft add rule inet filter input iifname "wg0" ip saddr @wg_peers accept
nft add table inet filter; nft add chain inet filter input { type filter hook input priority 0 \; }; nft add set inet filter wg_peers { type ipv6_addr\; }; nft add element inet filter wg_peers { 2001:db8::1 }; nft add rule inet filter input iifname "wg0" ip6 saddr @wg_peers accept
nft add table ip filter; nft add chain ip filter input { type filter hook input priority 0 \; }; nft add set ip filter wg_peers { type ipv4_addr\; }; nft add element ip filter wg_peers { 10.0.0.2 }; nft add rule ip filter input iifname "wg0" ip saddr @wg_peers accept

Optional: one short sentence why you picked it

Learning: nftables