Thanks vzw8830 - I've actually had support updates from both ExpressVPN and NordVPN (which I use). They both support IKEv2/IPSec connections for ARM based devices and I can confirm this works. Downside is that their actual app still doesn't work for the GUI experience; you have to manually change the remote server ID. BUT the main thing is that it works on the SPX. The NordVPN guide is here: https://support.nordvpn.com/Connectivity/Windows/1047410092/IKEv2-IPSec-for-Windows-10.htm