This may be a useful starting point. A few years old now but well researched and referenced.

I’ve got it on OOS14, I’ve got an EU OP11

You may want to take a look at Italy’s recent changes in legislation around VPNs tl;dr Italy’s government has an anti-piracy measure called Piracy Shield which is a list that needs to be blocked by ISPs, VPN providers etc but is entirely arbitrary with no governance.

Air has stopped onboarding Italian customers but you may want to consider given they’re based in Italy, if this compromises your use case/opsec

You can’t unless you switch to GrapheneOS

So just like people then 🤣

Why don’t you flash GrapheneOS onto your P7?