I use a VPN purely for torrents. Have a VM with a torrent downloading server. Only way that VM can route beyond the local net is they a static VPN address and the VPN interface. No VPN connection means no internet leakage.