https://mullvad.net/en/blog/2022/10/10/android-leaks-connectivity-check-traffic/

TL;DR:

"Block connections without #VPN" doesn't prevent #Android from performing connectivity checks circumventing the VPN
Google says thus "works as intended"
Google also says that "privileged apps" and tethering also circumvent this restriction