Wireguard
SPR uses Wireguard™ by Jason Donenfeld as the default VPN software.
You can add devices with a QR code and configure their network access by network policy.
You do not need a separate profile for a device's VPN and its WiFi Access, as they are seamlessly integrated.
Check out the VPN page for more info.