The provided solutions are good. But you can also install the vpn app inside a qube as if you were using a “normal” machine. Assuming you don’t want to do all the config yourself.
This is a great example I saw recently and I don’t see why it couldn’t work with other apps too.