Location service needs to be activated at startup for trusted networks to work

Location service needs to be activated at startup for trusted networks to work and VPN NOT to be activated. This not the desired UX and is not efficient. I need to deactivate VPN connection every time I use a trusted network or have location service ON all the time. I do not want the latter, and I am sure many others with me.

Can someone explain the rational and offer a solution?