Another way to leak traffic on Android has been discovered
Summary
Mullvad reports a newly discovered Android leak that allows any app to leak traffic outside the VPN tunnel by abusing a keep-alive UDP connection. The issue exposes the device's real IP even when the user enables 'Block all connections without VPN'; mitigations are uncertain and a fix would require changes to Android. The piece recommends cautious app installation and considering privacy-focused Android forks like GrapheneOS.