Hardware: Archer BE550 Pro v1.6 (Pro model not listed in the Model drop down)

The VPN client does not force all traffic through the tunnel and it does not have a killswitch. I have learned that I was leaking when I discovered my device or guests devices were not routed through the tunnel unless I log in and allow every instance of a new device through the tunnel. Also my phone and PC randomizes their MAC addresses so they are exposed whenever that happens.

This seems like a vulnerability and it is also very inconvenient to keep an eye on every instance of a new device in the home, log in and allow them through the VPN.

Can a VPN Client request be made to 1. force all traffic throught he VPN and 2. add a killswitch. thank you