I'm also in need of an"always-on" Network Extension in macOS. I see this topic was posted a year ago now. Any progress on getting this functionality into Catalina?
What about creating a LaunchAgent in /Library to invoke the host app as root? Would the system extension be invoked in root user space? Has anyone else attempted this? If not, I think it's time for a little test app...