The argument is generally against using a VPN for privacy reasons. VPNs are often marketed as being a tool to "keep your browsing private" but the truth is that

The argument is generally against using a VPN for privacy reasons. VPNs are often marketed as being a tool to "keep your browsing private" but the truth is that almost all of your browsing data is already private thanks to widespread HTTPS. And the information that isn't private (i.e. IP addresses you connect to, connection metadata) still isn't private if you use a VPN. Instead it just changes who can see that data - instead of your local ISP it becomes the VPN operator plus their ISP. Users in Russia (and China, Iran etc.) are primarily using VPNs as a way to access content that is blocked by their local governments. So in these use cases a VPN actually is quite effective - the local government can no longer see your metadata and restrict your connections. Basically, a VPN does not make it any harder for someone to steal your password/credit card number, but it is a useful tool to prevent an adversary on your local network from messing with your connections.