What are your thoughts behind split tunneling on corp VPN? Due to this configuration there is a lack of available logs and monitoring on corp machines if a security incident was to happen. What is your configuration preference?
You could do split tunneling with a SASE solution.
The issue with going full tunnel is performance drops considerably.