DNS TRAFFIC CAN LEAK OUTSIDE THE VPN TUNNEL ON ANDROID

Summary from the TLDR Web Dev newsletter

Some Android VPN apps can leak DNS traffic outside the VPN tunnel, even with privacy features like "Always-on VPN" or "Block connections without VPN" enabled, due to bugs in Android itself.