For Functionapps and WebApps, if WEBSITE_VNET_ROUTE_ALL is set to 1, it cannot be removed. So much so that my entire App Service Environment (deployed on a vnet) now throws errors for all updates and deployments. Has anyone else seen this issue? I have raised it to azure support.