I’m using this docker container for some years: https://github.com/haugene/docker-transmission-openvpn Works well with my lifetime FastestVPN which I got for a few bucks some years ago.

Never say never.

When somebody somehow gets access to your Keepass Database.

Kind oft defeats the purpose a bit having the second factor in the same place as the first. But I’m doing the same.

Its not for privacy, but for deniability. I wouldn’t “trust” any traditional VPN.

Got a lifetime subscription for FastestVPN some years ago. Its slow, but it works and is unlimited so 🙆‍♂️

You’re talking about Android (Linux) phones, and not GNU/Linux as stated in the question.

I just use Transmission in docker and VPN with killswitch. Done.