How it works
How NetCage routes selected apps into a local VpnService tunnel, reads the header fields needed for a refusal, and keeps an empty allow-list from taking the whole phone offline.
How NetCage routes selected apps into a local VpnService tunnel, reads the header fields needed for a refusal, and keeps an empty allow-list from taking the whole phone offline.