There's no need to dream about it, it already exists: https://f-droid.org/packages/com.celzero.bravedns/

I used to use it when I wasn't on grapheneOS and needed to block internet access.

That only uses wg for DNS queries. Everything else remains untunneled.

From what I see running the test on my phone, there's an option to tunnel DNS through Rethink here, which you can change to the VPN's DNS. Everything else is tunneled by default through wireguard. Maybe there's a configuration issue on your end?

The only place I see where wireguard can be set up is as a proxy for DNS. Perhaps that would still allow changing the default gateway?

It's annoying to see so much RethinkDNS propaganda on every Netguard or Invizible Pro thread on the internet.

That gives me a bad feeling, and it's the reason I started to consider RethinkDNS scummy.

Was the above post propaganda? Or was it just a user recommendation?

Perhaps the reason it gets mentioned often is simply because it's a good piece of software. Then again, perhaps not!

In any case, I'd be careful about using 3rd party DNS (and other) services, but that's for the user to decide, depending on the situation one is in.

Using one's own resolver is always a good practice, even in countries where ISPs are not selling customer's private data to anyone that comes along and where governments don't monitor and repress their citizens on every step...

We live in strange times where even EU countries misuse resolvers to censor certain web pages, while, for example, independent Balkan countries do not. Go figure...

I didn't intend for this to be propaganda, I don't even use it anymore since I'm on grapheneOS now. But I have tried all three. I need to use a VPN in split mode for certain apps, and since using Tor with apps wasn't part of my threat model, I ended up using RethinkDNS (the app only). I don't necessarily like their upstream DNS servers, but considering that I can use my own server (and do), I don't consider that to be an issue.

especially that Wireguard silently disables NetGuard, and then the communication undergoes (at least in my case) silent