We're missing crucial information.
What bandwidth do you get from your ISP? Do you want to run things like IDS/IPS? what kind of throughput do you want from wireguard?
What it takes to connect a 100/10 DOCSIS based service is completely different to a 1/100 service is completely different to an 8/8gbps fiber service.
You said wireguard on the modem... your modem shouldn't be doing any routing of tunnels at all. I'm almost suspecting that you don't know what the difference between a router and modem is because of this "misspeak". If you don't, you need to go watch some networking basics youtube videos and get a firm understanding before you commit to buying stuff that you have no idea what you're doing with.
In my case, I'm blessed with 8/8 fiber. I have a full fancy supermicro server running opnsense. 10gbps on the wan side, 40gbps on the lan side for multiple vlans (about a dozen). It's overkill because my ISP offers it... but that means that the "router" I'm using to use the 8gbps is also ~$2k cost to do it. With big bandwidth comes big processing overhead if you want to do any form of protection and tunneling (VPN or SDN).
You shouldn't really care how many interfaces your router has outside of potentially doing LACP sort of redundancy. Use a switch to get more ports for your devices.