The "block connections" setting avoids accidental leaks, which may be crucial. Consider that if you set up a work profile or secondary user account, that will need its own vpn. So you can also separate select apps that way, if these few are special in a way.