Just an FYI. Outbound firewall logging made it quite easy to find a bug in iOS that leaked VPN data.
VPN security — iOS VPNs have leaked traffic for more than 2 years, researcher claims
iOS VPNs have leaked traffic for years, researcher claims [Updated] | Ars Technica