# What should we require of VPN providers on macOS?

**URL:** https://discuss.privacyguides.net/t/what-should-we-require-of-vpn-providers-on-macos/36175
**Category:** Site Development
**Created:** 2026-03-11T01:16:46Z
**Posts:** 91
**Showing post:** 19 of 91

## Post 19 by @ignoramous — 2026-03-11T02:09:22Z

> [@Remove ProtonVPN](https://discuss.privacyguides.net/t/remove-protonvpn/33980/341):
>
> While this is no longer a _technical_ issue for us, because of the criteria change above

I don’t get why this is no longer a technical issue?

From Apple’s documentation, it seems that `includeAllNetworks` flag will prevent the traffic leak scenario on exit server changes that Proton is hitting on macOS?

Even then, it isn’t clear why Proton’s macOS app should leak on exit server changes at all, without `includeAllNetworks` flag set. If Proton’s using WireGuard… nothing about the official implementation strikes me as requiring recreating the VPN tunnel (which is where I presume the leak comes from) on exit server changes.

(… with the caveat that I’m not an experienced iOS developer) It seems like `enforceRoutes` is another ‘killswitch’ like API that may work.

> [@Remove ProtonVPN](https://discuss.privacyguides.net/t/remove-protonvpn/33980/348):
>
> ![](https://forum-cdn.privacyguides.net/user_avatar/discuss.privacyguides.net/ph00lt0/48/6697_2.png)[Remove ProtonVPN](https://discuss.privacyguides.net/t/remove-protonvpn/33980/332)
> 
> > Apple’s architecture makes it nearly impossible to make a functioning kill switch.
> 
> This is a misleading statement. NetworkExtension docs do mention that for VPNs using `includeAllNetworks` (a form of a ‘killswitch’) will prevent traffic from bypassing the VPN for advertised routes, for example, when apps may “scope” their traffic to a particular network interface

I’m aware of Mullvad’s blog post that claims that the `includeAllNetworks` flag results in permanent connectivity loss on iOS when the VPN app that sets the flag is killed by the platform’s app -updater.

---

_[View the full topic](https://discuss.privacyguides.net/t/what-should-we-require-of-vpn-providers-on-macos/36175)._