Encrypt all the things!

Is there a VPN that protects against ISP monitoring, doesn't monitor themselves... AND doesn't break local network connections?

The ones I'm using:

• Google One VPN - essentially an OpenVPN (default on Windows) or Wireguard (default on Mac and Linux, optional on Windows) tunnel to a layer of anonymised servers. Google primarily offer this as a subscriber perk (and a defence against DNS adblock) and it can be the cheapest VPN due to the lowest price of £1.59 per month (which I'm on)... but... it breaks the Stream Deck as that uses local 192.168.3.x addresses to control some of the lighting and Google is trying to send all HTTP(S) traffic out over the internet!? Local SMB to my NAS still work though.
  
• Mullvad - essentially OpenVPN, breaks SMB to local network in addition to breaking the Stream Deck, so even more useless.
  
• CloudFlare 1.1.1.1 - full Wireguard (even on Windows) and whilst SMB works again, the Stream Deck does not.
  
  

In essence, none of them fully honour the private address space https://www.arin.net/reference/research/statistics/address_filters/

What I would like is either a way to configure any of the above, or just a VPN that does a good job of this. Note that all of the above seem OK with 192.168.1.x, but not with 192.168.3.x so they all seem to autodetect the network that is in use but they still try to route other private networks.

Edit: This is on Windows 11 btw... and my assumption was that all of the VPNs would be fine, the reality is that none work as expected. I am using multiple VLANs, but local traffic should still work regardless of that as it's still in a range that should be sent local.