Is this because VPNs tend to use a single server to handle customer traffic? Tests for use of VPN seem to rely on open ports so perhaps separate ingress and egress servers would be an improvement that can be asked for.