Your VPN may be increasing your attack surface

Good encryption, bad assumptions