Stumbled upon this old thread as I have exactly the same setup and exactly the same doubts :-) Not sure what is the best setup to ensure pihole is used for all LAN clients, including these routed via WAN and these via VPN tunnel, and ensure no DNS leaks.
I'm sure you found...