I’ve done some basic tests with openvpn (nordvpn and freeopenvpn). It’s already included in the basic OS3 firmware.
You download an ovpn file, create a credentials file and link to those credentials in the ovpn file.
Then start the tunnel with the file.