If you don't want to stick with Nord, Proton VPN has an (unofficial) Flatpak GUI app, or alternatively lets you generate Wireguard configs you can import in KDE's network settings (which allow you to auto-connect, but you would have to take care of a 'killswitch' yourself if you want 0 leakage)