[thdrdt]

If so many people are confused by this, aren't VPN settings per app not insecure by default?

It looks like a lot of people are under the assumption that enabling VPN means system wide.

[wizee]

Per-app VPNs have existed for some time, and their use case is different from system-wide VPNs. Typically, per-app VPNs are used when you want to grant specific applications access to resources on say a corporate VPN, without granting all applications access to the VPN. Per-app VPNs are also useful if you want to protect a specific app's communications through an encrypted tunnel without affecting the rest of the system.

More info on the purpose of per-app VPNs: https://support.apple.com/en-us/guide/deployment-reference-i...