That gap is where lightweight consumer VPN apps live. Not enterprise tunnels with split routing and certificate management, ...