Is it possible on iOS to activate a non-leaking always-on VPN? I've heard this can only be done through supervised mode and with a VPN provider that supports "IKEv2", is this correct? Are there any downsides to this approach, for day to day use on a personal phone?

Also, is supervised mode configurable on Windows / Linux?