GrapheneOS closes an Android VPN loophole before Google does

Credit: Calvin Wankhede / Android Authority TL;DR GrapheneOS has patched an Android 16 VPN flaw that Google reportedly decided not to fix. The bug could let a malicious app leak small amounts of data outside an active VPN tunnel. In extreme cases, that means it’s possible stock Android users could have their IP address leaked, even with strict lockdown controls enabled.