Firefox VPN is great for beginners, but it assumes too much and isn't flexible enough for power users. I had to cancel it because "Allow LAN connections" didn't base itself off my local subnet, but on RFC1918. My network is in a private IPv4 net other than that, and I couldn't configure split-tunnel manually.

Proton VPN works wonders and I like their mail product too.