AA is also EXTREMELY vpn-unfriendly. It fails to work period of I've got a wireguard VPN without app restrictions, even if there are only a handful of routes using the tunnel. Then, if I restrict the VPN to just certain apps, it'll still give me the big ol' middle finger running those apps via AA, which means I can't stream from my home media host over VPN while using AA because Papa Google apps no.