

Thats what the firewall rules do too, don’t allow internet connection if there’s no vpn connection.
Firewall is a system-wide solution that always works, while qbt config relies heavily on the application implementing interface binding properly. Which it doesn’t fully btw.
This is why you should always have a backup method of logging in. For hardware security keys they always recommend having a second key as backup.