Zero Trust network only

Hi

I’m checking Cloudflare as an alternative to tailscale
So complex to deploy, but I’ve made it eventually.

However, I want only to steer network routed trough CFAccess, without controlling the mobile DNS for example. Is that possible ?
I’ve enabled split tunnel so only 10.0.0.0/24 will be routed