Amazon Fire tablets are like $100, marketed toward kids and come with a one year subscription to their Amazon Kids service which give access a bunch of games, apps and videos. I would guess that’s the majority of Android tablet sold.

Pepperonius

You’re using the default port though, are you not? If the source port were not 1194, a port associated with openvpn, would wireshark still identify this as openvpn traffic?

I don’t think it’s even possible to get rid of VPNs without outright banning encryption. If I set up a VPN that uses an obscure port and the traffic is encrypted, how are they going to know it’s even a VPN?