OpenVPN for untrusted networks [incomplete]

1. Automate Community
2. Tools

Connects to OpenVPN (via de.blinkt.openvpn) only for untrusted networks

This is my first Automate flow and my first community submission. I just started to learn Automate. I'm pushing to the community with an incomplete flow in order to finish and discuss that with the help of more advanced users.

Discussion thread: https://groups.google.com/g/automate-user/c/BdrtpBnY5sU

Description:
I keep a dictionary of trusted Wifis. The VPN tunnel is only established for untrusted Wifis. I trust my mobile connections. This flow is only comparing SSIDs, not BSSIDs, and not safe against spoofed network names.
For now I like to keep it simple, compact and understandable without 100s of SQL blocks, according to my basic skill, which might increase in the future...

Open points, questions and things not working:

* I like to check against trusted SSIDs via a dictionary setting value 1 for each key. Is that a good approach? How would I implement a way to have "SSID is like MYNET*" because all my network names are starting with the same name prefix?

* Starting VPN via shortcut opens the OpenVPN app in foreground, can I do that in background?

* If VPN is successfully established is currently not checked. Instead of using an App start I tried an App decision block, but that always fails with No. I could workaround by pinging a special host in the VPN.

* For faster resuming I just start the VPN after start block and later just pause and resume.

* How can I increase version number of community submissions? Is there a version history of all Uploads available?