Rethink: DNS + Firewall + VPN fits Android users who want visibility and control over application connections. Review the observed connections, choose the intended DNS configuration, and test a limited firewall rule before adding an existing WireGuard connection.
WireGuard endpoints and any paid VPN services are separate requirements. Network blocking can disrupt applications that depend on background services. Match the configuration to your needs, and keep recoverable copies of important settings or keys.