My bad. I assumed this was about regular split tunneling, not inverse, which I had never heard of.

Mullvad has that now. It usually works.