Settings visibility
App Restrictions can control access to the Settings shortcut and individual areas including Playback, Live TV, Interface, IPTV content/category management, VPN and Diagnostics.
VPN profile editing
A useful managed deployment can leave VPN itself available while disabling local profile editing. The user can then use the provider-managed VPN profile without being able to add, select or delete local profiles through the normal UI.
Dynamic behaviour
Restrictions are delivered as managed policy and can be changed without regenerating the APK on compatible app versions.