[massar]

As there is a Linux kernel underneath, basically anything could in theory work; but non-standard options require 'developer mode' operation which kinda destroys the security model of ChromeOS.

Android apps (on some models of the laptops) might work though.

Having support for Wireguard would be pretty neat, but afaik not possible yet.

OpenVPN works quite fine for my use cases up to now.