Why does Guardian Firewall need to install a VPN profile upon initial setup?
A VPN profile is necessary for the service and allows for a better user experience

The VPN profile is needed due to the nature of how our service works and in order for our firewall to operate. It is a remotely hosted firewall, meaning, the filtering of blocking trackers and unwanted connections happens in the cloud, in order to preserve battery life on the device as well as guaranteeing compatibility with future versions of iOS.

Rather than requiring a customer to manually input the configuration for the VPN profile to their device VPN settings (which can be rather tedious), accepting the installation allows Guardian to handle the work automatically so that a connection can be made right away without leaving the application.

Additional related articles:

Guardian Firewall does not need to know your physical location

Guardian Firewall is designed to only allow the Firewall to work through our VPN

Apps or websites may block access when a VPN connection is detected