what's wrong with icloud private relay? It uses a 2-hop architecture so it's probably more private than any single-hop VPN.