A VPN is definitely an example of software you should use rpm-ostree to install.
I think it’s fine if you use rpm-ostree for it, but it’s not necessarily required. I recently found out that the Mozilla VPN developers are experimenting (!) with building a Flatpak, and having tried it myself, it works very well.