Not Sure Wireguard Routing is Working Correctly

[mitchro]

Configured Wireguard on pfSense+ 22.01. The client is setup on Pop_OS. When the tunnel is up, I'm still seeing traffic coming from the ip address assigned to the wireless nic(i.e. apt.pop-os.org, teams.microsoft.com). Occasionally, i'll see traffic coming from the ip address assigned to the Wireguard client, but most from the nic's address.
The Client config is this:

[Interface]
PrivateKey = ##########################################
ListenPort = 51820
DNS = 192.168.100.13
Address = 172.16.16.3/24

[Peer]
PublicKey = ###########################################
Endpoint = X.X.X.X:51820
AllowedIPs = 0.0.0.0/0

Key connection alive

PersistentKeepalive = 30

Wireguard Status:
🔒 Log in to view