Docker is a cleaner solution for split tunneling. Container for the VPN (gluetun), and container for qbit bound to the VPN container for network access. You still need to manage the listening port when Proton changes it, but that’s easy enough.
If you set it up right, it also doubles as a bulletproof killswitch since qbit can’t see any other network.