There seems to be an issue with DHCP protocol, allowing to set routes via DHCP, which would compromise any VPN on the router, because it would bypass the VPN gw.
Here an article about it:
And video:
I would ask community to look into the issue, as it would bypass the VPN if there is a compromised open WLAN with DHCP server