This is no longer the case. You can implement VPN via NetworkExtensions: https://developer.apple.com/documentation/networkextension