This was never addressed nor improved? I am in complete agreement with the general sentiment here: an explicit "Kill Switch" MUST stop all WAN traffic generally or at least INSIDE the VPN tunnel (when split tunneling is in use) whenever the VPN fail...
