I’ve seen tracking apps that prompt the user to enable a vpn on iOS so all their traffic is routed through them (this was not a vpn app, this was a user tracking app - not malicious. Now imagine a malicious one that doesn’t go through App Store review). The vpn thing on iOS is concerning. The user may not even know or remember they allowed it and it could just be sitting on their phone indefinitely.

I’d like it if Apple restricted VPN access for only App Store approved apps.

Again, it’s not you who I’m concerned about. It’s everyone else. It’s not hard, watch:

here you go dumb teenager, download this crypto app and hit accept on everything and get mining this new alt coin

Boom, vpn enabled and traffic intercepted.