Hello!
Thank you very much for your tests! We're very pleased to receive confirmation that this version solves those problems.
Network Lock does not survive, but it is re-enforced before any new socket can be created, so no leak occurs. This is exclusively up to systemd: apart from writing correctly the suspend and resume unit files there's nothing else we can do, we're afraid.
Kind regards