Audit safety of whole-device (always-on) vpn mode

https://developer.android.com/guide/topics/connectivity/vpn#always-on