I’m using this docker container for some years: https://github.com/haugene/docker-transmission-openvpn Works well with my lifetime FastestVPN which I got for a few bucks some years ago.

Never say never.

When somebody somehow gets access to your Keepass Database.

Kind oft defeats the purpose a bit having the second factor in the same place as the first. But I’m doing the same.

I just use Transmission in docker and VPN with killswitch. Done.