281 Android VPN Apps Expose Users to Traffic Leaks, Tracking and Tunnel Hijacking

This analysis reports that a large number of Android VPN apps leak sensitive traffic (DNS, IPv6, and app traffic), include tracking and advertising SDKs, use weak encryption practices, and may be vulnerable to tunnel‑hijacking, exposing users—especially on public Wi‑Fi—to privacy and security risks; it recommends choosing audited/paid providers, enabling kill switches and always‑on VPN, reviewing permissions, and keeping software updated.