Great to see it is solved.
Like you did is exactly what I had in mind.
def1 is a specific instruction for openvpn
The mechanism, using the /1 to override the default route instead of replacing can also be useful in e.g. wireguard when you switch tunnels on and off 
If your problem is solved, please consider marking this topic as [Solved]. See How to mark a topic as [Solved] for a short how-to.
Thanks!