I also complained about this (actually had a ticket open because I
thought it was broke) when we migrated to 2.0. I specifically didn't use
the EULA stuff in 1.0 because it prompted to accept every time.
I just started testing with Big Sur 11.2.2 and AnyConnect 4.9.04043 on
intel architecture and I can't get the System Extension to be allowed
without user prompt. I've tried with just team id, with the
NetworkExtension extension type, and with the ext...
