Falcon Use a VPN in each profile (user profiles, work profile and Private Space) and set connectivity checks to Standard or Disabled to blend in with other Android devices. You don't need to disable any default connections.
Connectivity checks are the only default connection not routed through a VPN since we don't use Android's standard NTP. You can set those to Standard to blend in with other Android devices or Disabled which loses the quite useful functionality they provide of detecting when the network is available for determining which network to use and when to run network-dependent jobs, etc. They also detect captive portals and allow handling them with the special OS provided captive portal app.
Wi-Fi calling and texting use a dedicated IPSec VPN and we want to provide more toggles for controlling it than the standard ones we enable.