That's effectively what "require a VPN" means. You can simply block any connection that doesn't come through the VPN.
a vpn is not as safe as you think it is.
An enterprise grade VPN is pretty damn safe. A government could probably get in but then a government probably isn't going to bother hacking your fridges to defrost.
Well, unless you buy one from Fortinet.