Mention kill switch leaks caused by OS limitations

[certainty]

Here are some for sources to start with Android. Obviously I know these issues are not solved so I did a ctrl+c & ctrl+v.

DNS Leaks:

DNS traffic can leak outside the VPN tunnel on Android | Mullvad VPN

VPN leaks DNS traffic outside the tunnel [337961996] - Issue Tracker

Connectivity check leaks:

Android leaks connectivity check traffic | Mullvad VPN

Add option to disable connectivity checks when VPN lockdown is enabled [250529027] - Issue Tracker

GrapheneOS issued fix to these issues but not yet implemented in AOSP

GrapheneOS fixed Android VPN leaks

GrapheneOS is currently the only Android OS that has fixed these leaks.

Android connectivity checks occur outside VPN tunnels

https://2722--glowing-salamander-8d7127.netlify.app/en/android/distributions/#grapheneos GrapheneOS provides the option to switch back to connecting to Google’s servers for many of these background connections if you prefer, but it is far more robust/foolproof to use a trusted VPN and enable Android’s native VPN kill switch to hide information like this from adversaries on your network. Connectivity checks still happen outside the VPN tunnel, using the VPN alone will not cut it, one needs to…

Improved VPN leak blocking - GOS website