My analogy for non-IT people for a VPN is that it's a tunnel between houses so you don't have use the road or footpath. Then I point out that if it's easy for

My analogy for non-IT people for a VPN is that it's a tunnel between houses so you don't have use the road or footpath. Then I point out that if it's easy for you to get out, it's easy for others (in the other house) to get in. And by extension anyone who visits their house. That usually makes them think. Managed/service VPN makes the hole wider or tighter depending on how trustworthy the manager is.