SSL/TLS handshake initiations from unauthorized devices (although such handshakes would in the end are unsuccessful to authenticate, tls-auth can Reduce them off at a much earlier place).
(credit rating: PCMag, https://userbookmark.com/story18181883/the-single-best-strategy-to-use-for-android-vpn