Follow-up: after some tests I discovered that the ISP is blocking the TCP layer, but UDP is allowed (e.g. dig and nslookup work). So my WireGuard connection can easily pass through.

Now I'm really curious to know how many of you are going to don't pay the next invoice to test this possibility 😂