Another way to leak traffic on Android has been discovered | Mullvad VPN
mullvad.net
A newly discovered leak in Android allows any app to send traffic outside the VPN tunnel.

The leak involves telling Android to create a keep-alive UDP connection that is offloaded to the hardware Wi-Fi or cellular chip.

GOS fix in progress. Google has reportedly declined the bug report/bounty.