When I first looked into this, free Apple developer accounts could also only use limited app entitlements: so no network extensions, VPN profiles, Apple push notifications, or other capabilities. NetworkExtension is basically the only reason I’m interested in iOS development at all, so a paid account was not optional.