His argument is also flawed in that he says you need to roll your own because the VPN service providers can be compromised. Well, where are you going to run you

His argument is also flawed in that he says you need to roll your own because the VPN service providers can be compromised. Well, where are you going to run your server then? Any endpoint can be compromised by the business that owns it weather it be your ISP, AWS, or whatever else you plan to use.