GrapheneOS latest release includes a preliminary defense to prevent app-based VPN implementations from leaking DNS requests on Android when the VPN is down/connecting ( grapheneos.org )
Mullvad VPN's blog post: DNS traffic can leak outside the VPN tunnel on Android...
![](https://kbin.chat/media/cache/resolve/entry_thumb/6c/54/6c54b153a5fa109d223dc866367abad2ecd2925d91ef287696936081b7ef63f7.png)