In practice VPNs are a very visible layer that people will tend to rely on when they decide what security measures to implement. They are very clunky, so people

In practice VPNs are a very visible layer that people will tend to rely on when they decide what security measures to implement. They are very clunky, so people end up assuming that they must provide quite a lot of security, to be worth enduring.