The workaround I've found many people having success with is disabling the passcode and face ID, installing the VPN profile, then re-enabling those the passcode and face ID. Definitely needs a proper fix.