Rather then installing the vpn on the OS itself.
I have a work VM. I have one site I use for work and it blocks the packets from tor/whonix. What I would prefer to do is set that before and access the site via vpn there for the browser access thru that VM only.