The "internet" kill switch kills all "network" traffic, even local. It would be nice to have it still allow traffic originating in the user's local subnet. My use case was using a bittorrent app to save to a local NAS... whenever the VPN disconnected I would get I/O errors writing to the NAS causing corruption and an expensive reconciliation.