Is it possible to create an Always-On VPN as a private individual on iPhone?

Hi,

I am looking for a way to configure an Always-On VPN (or equivalent) on my iPhone so that the VPN/DNS profile cannot be disabled or removed by the user.

From Apple’s documentation, it appears that this requires Automated Device Enrollment (ADE) through Apple Business Manager (ABM) or Apple School Manager, which in turn seems to require being part of an organization (business, school, etc.).

Here’s what I’ve done so far:

• I have made the device supervised.
• I have tested pushing an MDM profile via Miradore, but the profile can still be removed by the user.
• Up until now I have been relying on a third-party DNS profile, but I am open to better alternatives if that approach is inherently limited.

My question is therefore:

• Is there any way for a private individual (who neither runs a business nor belongs to a school) to configure an Always-On VPN on iOS?
• Or is it a hard technical limitation in iOS that Always-On VPN only works with ADE-enrolled devices?

Any insights or experiences would be greatly appreciated.