How about using kill switch integrated with firewall just like mullvad and IVPN instead of simply blocking internet when unexpectedly disconnected? When disconnected manually or booting at first, it will leak your real IP address. Actually kill switch in most of vpn that doesn't combine with...
