This is not, perhaps, the real concern. It seems browsers, via WebRTC, expose all detected public addresses, so even though your default route may be through a

This is not, perhaps, the real concern. It seems browsers, via WebRTC, expose all detected public addresses, so even though your default route may be through a specific interface, the browser will probe all local interfaces and discover all possible public IP addresses. I'll let you figure out how this could be compromising.