Great progress!
The idea is get fully rid of qemu:///system and exclusively use qemu:///session.)
Likely not, because your current version is still using IP addresses.
Ported to unix domain socket files. Please test and take over:
No Internet Connection inside Whonix-Workstation KVM with NordVPN with Kill-Switch on Host - #16 by Patrick