VPNs have been sold as a kind of security blanket. Encrypt the traffic, build a tunnel, move on. That logic sounds responsible, but it’s missing a big part. Security isn’t just about how the data travels. How much access exists when something goes wrong?