because that doesn't solve the problem. there are all sorts of choke points between your vpn provider's output and your destination server where unencrypted pa

because that doesn't solve the problem. there are all sorts of choke points between your vpn provider's output and your destination server where unencrypted packets can be read, and many of them are not guarded well. BGP even is not particularly secure. You should treat an unencrypted packet as less secure than a post card.