I hold this close to my heart, living in a country where I basically need it on 24/7, but even then, they're basically banned and many of them have to concede and share all the data traffic with the regime in order to continue functioning!
Thankfully the one I use at least claims to have a way around it... Didn't even consider how complicated they can be as this post demonstrates...
For IPV4, the IPsec functionality is optional but with IPV6 it's not optional. Hence my hope is high. Thanks for your time @mobbs
Yeah, in China, that is the only way to access a lot of things :)