You are assuming that every use of VPN is captured in your scenario. It's not. And I understand MDM perfectly well. I am the CIO of a company with 350 Macs man

You are assuming that every use of VPN is captured in your scenario. It's not. And I understand MDM perfectly well. I am the CIO of a company with 350 Macs managed through JAMF. Also, nobody in enterprise who knows what they are doing uses Mac Server. It's been a toy and a joke ever since Mavericks. But what if I need a VPN connection for somewhere else? What if I'm a consultant with a Mac and trying to connect to a Windows shop?