If you put two /1 routes towards the private vpn endpoint and one route for your public vpn endpoint to your public ip it'll route all traffic over the vpn beca

If you put two /1 routes towards the private vpn endpoint and one route for your public vpn endpoint to your public ip it'll route all traffic over the vpn because it's the more specific route. The rest is your ip rules and your issue if you don't want any traffic in your physically attached subnet to go over the shortest distance. It's not really up to the protocol, it's the tooling around it.