As a user: There needs to be absolute certainty that clearnet is disabled when I want it to and no way to leak the IP. Kinda like how i know setting mullvad as the internet adapter should mean client traffic only ever goes over that connection.