I’m a bit late but I’ve been running Android with an extra work profile to isolate apps for years. As others mentioned VPNs are a per-profile thing, so you can just use your Insular or Shelter app to install (clone) the VPN app to the work profile. Then just make sure you are always running 2 VPNs (normal profile and work profile).