Questions regarding Android 16 getting separate local network permission

thmf

It's nice to see Android 16 will get a separate local network permission, albeit not right away, but in stages. I'd like to know what GrapheneOS project and the community thinks about this and have a few questions:

How will this work in conjunction with the existing "Block connections without VPN" toggle?
In Local network definition CGNAT IPs (100.64.0.0/10) are also included as a part of LAN permission. Why is that?
I understand CGNAT IP scope is not part of Internet, but I still fail to see why it should be considered as LAN.
I guess what I'm trying to say is it would be nice to have LAN access while still benefiting from the "Block connections without VPN" toggle at the same time, since people tend to use their own services in LANs. Will this be possible?

TGOS

thmf

thmf I guess what I'm trying to say is it would be nice to have LAN access while still benefiting from the "Block connections without VPN" toggle at the same time, since people tend to use their own services in LANs. Will this be possible?

I'd like to add that I'm also curious if it'll be possible to use the new Local Network Protections while having Internet-access revoked.