Sempa every user App needs to use the VPN connection with the necessary settings which are enabled by default on GrapheneOS.
these are VNC clients, what should "best for privacy" mean? Look at how well they are maintained. Security is important, they are all just VNC clients.