At this point, I'm not even going to bother trying to go on there anymore.
If you run a VPN app, you can use AFWall to force all traffic through the VPN. So if the VPN app isn't running for some reason, the apps set to only go through the VPN service will have no internet access.