- Update TunnelKit - Receive TunnelKit notifications on main queue - Bind VPN toggle to VPNManager directly (implicit animations) - Update state on VPN didFail - Set isEnabled = false after uninstalling VPN (not notified)