Seems to be so, see Exceptional behavior of document.all

Although document.all is also falsy and loosely equal to undefined, it is not undefined. The case of document.all having type “undefined” is classified in the web standards as a “willful violation” of the original ECMAScript standard for web compatibility.

By setting AllowedIPs = 0.0.0.0/0 you configure the server to route everything over your phone. It should only be set to the VPN ip of the phone.

Vivaldi is the best!