Android connectivity checks occur outside VPN tunnels

[redoomed1]

@Lukas

one needs to also change connectivity checks to Google if they want to hide the fact that they’re using GrapheneOS

@Lukas

Always-on VPN and Block connections without VPN by default. So the user doesn’t really have to enable or do anything

I opened a PR to incorporate the feedback you provided in this thread:

update: Correct advice to hide OS info from network on GrapheneOS

Please let me know if any wording should be changed.