Thanks dismount2784 Appreciate you replying. Also thanks for the link to the android bytes podcast in the other thread, which was interesting.
I think I'm fairly comfortable - as much as one can be! - that I understand my threat model, at least in so far as why I'm using GOS and VPN in the first place. I do trust my VPN provider, not sure I'd say the same of every mobile base station to which I connect. I was curious therefore you're response seemed to play down the importance of using VPN at all (at least in the first few minutes of installing a new profile), and I was interested as to your or others views on that, in case i was misunderstanding it?
Assuming I've not misunderstood, I'm pretty comfortable I should us a VPN, and apply a 'All the gear all the time' approach as best practice. As such, very interested if anyone has any advice, hints or tips, or anything likely to be in development, to getting the always on VPN up and running quickly and easily in new profiles, especially when travelling and not having access to a VPN router / other phone with VPN'd WiFi hotspot. It does seem a bit awkward right now.