This article doesn't address the fact that if you use an MDM profile, you can actually configure it to require all traffic must go over the VPN. But that is kno

This article doesn't address the fact that if you use an MDM profile, you can actually configure it to require all traffic must go over the VPN. But that is known to only work with MDM profiles.