How does your VPN handle having its connections blocked by an adversary in the middle? Does it “fail open”? Or silently fail? Does it alert the user? Does any

How does your VPN handle having its connections blocked by an adversary in the middle? Does it “fail open”? Or silently fail? Does it alert the user? Does anything on your device use non-TLS? Software updaters? Are they susceptible to downgrade/fallback attacks? When I last properly explored this I found a good number of automatic software updaters would fall back to plaintext HTTP (or just didn’t use TLS) and often didn’t perform much or any signature checking on updates.