This is exactly why you should de-Google (even though they will fight tooth and nail not to let you).
Bug reported, Android team marks that they won't fix (infeasible), meanwhile @GrapheneOS patches it right away.


Mullvad VPN
Any app on recent Android versions can leak certain traffic | Mullvad VPN
A recently discovered bug in Android 16 allows any app to leak traffic outside the VPN tunnel.