[danShumway]

> Because as far as I know, Apple only allows NetworkExtension-based apps to be distributed via the App Store, according to their developer relations guy [6], so we're locked in.

They can't.