[kqp]

Is this really true? The Mullvad report a year or so ago was that they didn’t want to turn on no exceptions mode because it breaks network connectivity until reboot if you don’t pause it when updating the app, not that the feature doesn’t exist. They also recently shipped it anyway, opt in and behind a warning.

[Paradigm2020]

As a quick chatgpt check and following the links to apple's own site that still seems to be the case...

Force “most” traffic through VPN using includeAllNetworks Yes, but imperfect (normal) Yes (supervision)

stronger controls are tied to device management / supervision, usually for organization-owned devices.

https://developer.apple.com/documentation/NetworkExtension/N...