Aren't configuration profiles necessary for configuring VPN though? For the best security you'd want all your traffic to go through your own server for retrospective analysis.
Depends on the VPN and use case. I don't use a configuration profile for mine right now, but if I wanted to do anything more than manual activation I would need to use a profile to accomplish that.