Correct.

With normal split tunneling you can normally do something like this anyways, but it can be finicky to configure, and easy for something like DNS, etc to access the internet without your VPN in the middle. And sometimes if your VPN fails to connect, you could be connecting without your VPN.

By using docker with gluetun + qbit (I believe docker images for this setup exist already) you can force it to use only your VPN, and if the connection fails then your bittorrent client can't connect. With gluetun all your bittorrent traffic would flow through your VPN, but there's a way it can be configured to allow only your webui port to be accessed locally on your network