Tried disabling the privacy feature (deleting the list and any rules). Didn't help.
The only thing that helps and doesn't have this problem is using split tunnel VPN instead of full
Frankly, this sounds like an iOS bug.
avatar, can you explain the technical difference between split and full tunnel mode? Why does split tunner can get bypassed when connectivity is bad? How does full tunnel prevents this bypassing?
It's not that we're doing anything. The main difference is how iOS works with these tunnels. It can choose to bypass the split-tunnel, but not the full-tunnel.