Please do not completely trust the kill switch functions of VPN clients

If the encrypted tunnel is established to prevent any leaks before the OS even connects to the internet and before even any of GUI loads, why and how is what I said necessarily inferior?

And can you elaborate on your point too?