Thats what the firewall rules do too, don’t allow internet connection if there’s no vpn connection.

Firewall is a system-wide solution that always works, while qbt config relies heavily on the application implementing interface binding properly. Which it doesn’t fully btw.