If an actor wanted to cause the OpenVPN configuration file to execute a command they would add the "script-security 2" line, which allows user defined scripts to be executed, and a "up" entry ...

You can find instructions on how to use WireGuard on Mullvad's website. Is WireGuard the future? As mentioned earlier, WireGuard and OpenVPN are the most common VPN protocols.