Does OS X not have a firewall you could use to block all traffic going through the non-VPN interface? That'd work immediately, without the gap until the script triggers.
Yes, it is possible to use pf to do that. That is why I mention that it might be a good idea to use the script in conjunction with strict firewall rules.