confirmed in ios 15: VPN set to ondemand (which autoconnects shortly after boot) leaks dozens of dns requests not-via-vpn on boot of iphone, divulging true client IP <-> VPN IP association to DNS server.
@sneak did ios 14 do this
@surfingalot i don't know
