Unfortunately, OpenVPN has other configuration directives that can execute commands as well and Baines recommends users use the Viscosity OpenVPN instead, which can filter out these types of commands.

If you manually configure your VPN on a router or legacy device, you have just weeks to update your credentials. Proton VPN ...