I recently wrote a blog post explaining how I set up Mullvad VPN in Qubes, using NetworkManager in the systrem tray, having it automatically connect, and using the Qubes firewall to prevent leaks. Check it out https://micahflee.com/2019/11/using-mullvad-in-qubes/