Routing only selected traffic through the tunnel is a bandwidth and compatibility feature, and it deliberately creates two identity contexts from one device.
The privacy risk is correlation: apps outside the tunnel expose the real address alongside tunneled activity from the same machine and time window. Where identity separation is the goal, split tunneling works against it.