Because split tunnel is a pain in the ass. More specifically it's a pain in the ass if you use AWS ALB load balancers and whitelisting. Those IPs aren't consis

Because split tunnel is a pain in the ass. More specifically it's a pain in the ass if you use AWS ALB load balancers and whitelisting. Those IPs aren't consistent and you typically can ONLY route on IP. We do it because it's better than the alternatives, but our setup wouldn't scale past more than a few applications.