This is exactly why you should de-Google (even though they will fight tooth and nail not to let you). Bug reported, Android team marks that they won't fix (infeasible), meanwhile @GrapheneOS patches it right away.

Mullvad VPN

Any app on recent Android versions can leak certain traffic | Mullvad VPN

A recently discovered bug in Android 16 allows any app to leak traffic outside the VPN tunnel.

For the past few weeks, I've been setting up LLMs into Goose and building out a custom desktop agent workspace. And now I have to ask, if given a choice, once you started using a desktop agent why would you use any other currently available form of LLM?