Killswitch
The killswitch feature for TorVPN is critical for preventing unexpected traffic leaks when tor is unreachable, especially because tor circuits can be unreliable at times. When the Tor connection drops out, the traffic from the device should not be leaking.
Initially, for the MVP, this could just block all traffic. Future improvements could include: optional app overrides RFC1918 overrides (for advanced users who are aware of the risks, perhaps tied to network connection name)