This still seems too difficult for the average person who isn't a sysadmin, but still wants to protect their privacy. Python? Virtualenv? Config files? Ugh. My ideal VPN appliance would be a minimal Busybox-based disk image that updates using A/B partitions and has a nice web UI. It lets you set basic things like the hostname, time, admin password, and then regenerates all of /etc. A cross-platform GUI setup wizard uploads the disk image to a VPS provider, you get back a URL for the web UI with clear client setup instructions, and that's it. If an update becomes available, you click a button, it downloads the new image to the idle partition, modifies the GRUB config to boot from it, and restarts. Done.