On macOS/Windows/Linux a VPN client can configure the system firewall to block all non-VPN traffic, as insurance against leaks.

There's no such configurable firewall on iOS or Android so you just have to trust that the system VPN interface is watertight.

macOS networking is closer to BSD/Linux and is more able to be secured against any tunneling into Apple Network Infrastructure.

There is some pseudo netdev being used for tunneling into Apple Network infrastructure and they are blockable.

You are probably better off, but if you are using an Apple browser, who knows. I am sure the same applies to M/S Windows.