I'm not sure. I guess that depends how your IT defines compliance. The code is available for review, which I don't think it is for the official client

I had the same issue and use this without any issues: https://github.com/yuezk/GlobalProtect-openconnect