Use Magisk, it bypasses SafetyNet. No need for dual boot https://github.com/topjohnwu/MagiskYou must install the Universal SafetyNet Fix afterwards https://github.com/kdrag0n/safetynet-fix
Wait, how does a VPN break TLS encryption?