> installing a configuration profile isn't supported with lockdown mode

You can disable lockdown mode, install the .mobileconfig, enable lockdown mode again. Which is what I did with https://apple.nextdns.io