Because that's the only way to do ad blocking for all apps without actually connecting to a remote VPN. Blokada works great for that and Google, an advertising

Because that's the only way to do ad blocking for all apps without actually connecting to a remote VPN. Blokada works great for that and Google, an advertising company, does not like that. Same for DNS66: >The app establishes a VPN service, with routes for all DNS servers diverted to it. The VPN service then intercepts the packages for the servers and forwards any DNS queries that are not blacklisted. >Custom upstream DNS can be configured. If the feature is turned off, the current connection's DNS servers are used. The app ships are pre-defined list of well known (mostly German) non-logging servers courtesy of the Chaos Computer Club. https://github.com/julian-klode/dns66#user-content-how-it-works https://github.com/julian-klode/dns66#user-content-how-it-wo...