I wonder why tethering traffic doesn't go through the VPN. I could be wrong, but I think it works the same way with iPhones.

I might test that later, but this (old) SE question seems to confirm my memory: https://apple.stackexchange.com/questions/266871/is-there-a-...

FWIW, all tethered traffic in GrapheneOS goes through a VPN.