Yes on Android it allows permanently set split tunneling. Btw, all system apps CAN bypass the VPN if they want. Captive portal, connectivity check and possibly SUPL do this. So GrapheneOS, maybe distros with the same patches, the rest will send your IP to Google.
On Android root you can use Magisk modules to change the SUPL provider. Using an adb permission “captive portal control” can change the captive portal server.
But nothing can change the connectivity check, device attestation and whatnot, which still all go to Google.