Substitute "VPN" with "any creative use of the hardware that requires low-level access to do something Apple might not endorse". But you're right, corporate VP

Substitute "VPN" with "any creative use of the hardware that requires low-level access to do something Apple might not endorse". But you're right, corporate VPNs will certainly still be allowed. Maybe you'll need to install it through the app store, and your company IT will have to submit their VPN configuration for Apple security review or something, but they won't block all VPNs.