Allowed IPS not being respected by Wireguard-ui

[gloatoriginal]

Currently I have set a client up via wireguard-ui:

When I go into the wireguard-ui container I am seeing that it's only allowing IPs for the wireguard network:

What's going on that I'm not understanding in this setup? When I had initially set this wireguard up it had no issues, but this seems counter intuitive to what's happening with the backend wireguard.