It tunnels everything that is bound to the same network (see the line with gluetun within the qbittorrent container.
And for anyone using a reverse proxy: that can run against the gluetun container with the bound containers port. (edit: in OPs example gluetun:8090 for qbittorrent web)
When “reasonable” deviates on every major setting then it’s not possible to provide a sane default. Both i3 and hyprland have example configurations - I have yet to see two identical configs in the wild.
You have it the other way around: it is aimed at people for whom there can’t be a sane default because of the highly individual wants.
If you don’t intend to adjust your environment to your workflow that’s fine - there’s KDE and gnome for a reason.
Why did you opt for a setup with 2.5" disks? I ask because I just replaced my track server because the 2.5" are just more expensive than a server replacement plus 3.5" disks where I’m from (with 4x10tb).