Well, got most of it working, although I had to do some DIY on the bypass package:
Also have to disable the WAN6 interface I guess. I'm testing NordVPN and they happily let IPv6 do its own thing outside of the tunnel.
It's running on 21.02.6, which was released about 2 hours before I took the leap. Would it still be recommended to upgrade to Divested?