A VM reaches network-online.target and the application still cannot connect

Networking is technically online, yet the route set required for the application arrives after systemd has already considered the network ready.