Moved to network wide VPN setup last year and I can confirm it does kinda suck but it’s the best I could come up with.