not exactly a DAW/VST but VCV Rack is a open source (though with a pro version , the pro version can work as a VST though I never used it in that way) eurorack modular synthesizer symulator if you want to experiment a bit

to my knowledge disabled apps do not run so you must have misunderstood something

if I understand correctly the rethink app does also work as a firewall , so no . I’ve also found netguard to be less intuitive and to have a less readable UI .

if you are just using rethink as a DNS provider however then netguard (or the rethink app) can allow you to have more granular control over specific apps .

just gonna say , rethink combines both a firewall and a DNS blocker .

I doubt it would affect Newpipe either honesty