Problem is it doesnt seem possible to use just one of these providers. Any suggestion on how to have a full tunnel VPN but exclude flows from a single application from the tunnel?

Problem is we need the packet tunnel to claim all IP traffic (IP based VPN) except for a single application which we need to bypass the VPN. Do you know why the app proxy works for App Store apps but not Developer Id apps? Is that a bug or by design?