Android 16 has a VPN leak witch apply to all VPN’s and Google don’t want to fix it 
It’s Basically a back door.
Thaughs?
For those running GrapheneOS, it’s worth noting that this was patched in the 2026050400 release early last week.
- disable registerQuicConnectionClosePayload optimization to fix VPN leak
Yes thy mentioned that in the Mullvad article.
While Google doesn’t want to “fix” the backdoor. 
Just a point of clarity though, a VPN leak is not synonymous with a “back door”. It simply means applications are able to communicate outside the VPN tunnel, revealing your true IP, and potentially exposing traffic to anyone listening (cafe owner, ISP, government, etc).
A “back door” can exist over a VPN, or outside a VPN. A VPN doesn’t strictly offer protection there.
However, at the time of writing the issue is marked as inaccessible by Google for unknown reasons.
Looked the article and indeed link to issue is blocked.
However, to be frank there can be multiple of reasons for this. One that comes in to my mind is that they want to take deeper look into this, since it is related to VPN and they may be looking if it compromises security in general.
Yeah I guess, I haven’t read up this much but I hope it is fixed in Android 17?!
Wouldn’t it be lovely to have a well working open source mobile operating system not dependent on Google 
Thanks for making us aware of the issue 
Edit: Clarified admittedly confusing abbreviation of open source (was OS… yeah I’m tired)
Well, there’s apple’s one but I have no idea how well it works.
OS was meant to stand for Open Source, my bad 
I’m tired
Yeah I could be wrong about Android 17 getting better 
Oh, it will be getting better. No doubt about that.
The real question is, for whom is it getting better? Chances are very good that it’s not for the end user…
Yeah that’s my worry 
like my new(i got it at release)Samsung S26 Ultra it’s FULL of iffy “Ai” stuff 