It may be overkill, but I run all my network traffic in a VM. I never load my client before I turn on the VPN, and make sure to use the kill switch functionality. There’s a step by step that should be followed for every time to remain secure in what you are downloading or uploading.