“There are no ways to prevent such attacks except when the user’s VPN runs on Linux or Android.”

So there are ways.