About custom dns+vpn

[ignoramous]

@xe3

But regardless of whether your DNS traffic is passing through the VPN tunnel or not,

Like you rightly intuited, on AOSP 10+, all DNS traffic (encrypted or not), from installed apps, unless explicitly “protected”, will flow through the active VPN tunnel.