About custom dns+vpn

[xe3]

@ignoramous

unless explicitly “protected”,

Could you elaborate on this bit.

What does explicit protection entail?

Is ‘explicit protection’ something that (A) the app, (B) the OS, or (C) the end user has the power grant or forbid?