This gets brought up time and time again and it is generally explained by the fact that the Darwin kernel also tracks the interface used when establishing a con

This gets brought up time and time again and it is generally explained by the fact that the Darwin kernel also tracks the interface used when establishing a connection or binding a socket. It has done so for at least 20 years now. It is not new behaviour. This means that if you open a connection over one interface and bring up another interface with a matching route, the connection is NOT interrupted as it would be on Linux or Windows. It will continue to function over the same network interface it was bound to until either that interface goes down or the connection is torn down and recreated. VPNs were not designed with being a catch-all privacy guard in mind. We should stop trying to pretend they were.