I was not aware of this until today. People use work profiles on Android to isolate their more privacy invasive apps. If you want those apps to be tunnelled through a VPN, you would have to install the VPN application you use on your work profile separately and turn it on separately in your work profile.
Yes, Private DNS carries over between profiles in my testing, just VPN that doesn’t