How to route only chosen app's traffic through the VPN and make sure it doesn't connect outside of the VPN? There are two use cases:
Apps not available in my country (for example Pandora) which I would like to use nonetheless and not accidentally burn/flag my account by revealing the real connection source.
Similar but for a browser. I would like to have a dedicated browser (maybe Brave) for connecting to some sites. Kinda like Tor Browser but without the hassle, slowness, and suspicion associated with Tor.
I do this successfully on the desktop by running a Mullvad VPN but only routing 10.0.0.0/8 through it and setting the browser to use the SOCKS5 proxy. This neatly routes only that browser's traffic through Mullvad while at the same time simply failing (kill switch) when the VPN is not active.
On Android, Mullvad app supports "split tunneling" which does the inverse of what I want. It allows to choose apps which are not routed through the VPN while all others are.