I already use a VPN (Proton) so I can't VPN back to my home (i.e. Tailscale). A very unfortunate limitation of Android.

RethinkDNS has the potential to solve all my problems since it can do per-app proxies, however I've found that it doesn't work well with Proton (or possibly Wireguard as a whole) with frequent proxy disconnects, making it a very painful experience. Which is a shame because in some cases I value DNS filtering more than VPN.