sadly the review team usually does not make any exceptions, the categories for classic are rather strict …
perhaps you could contact other vpn client devs to get some hints … here is one that uses the tun interface:
and here is a strictly confined openconnect client: