I think the point is more about if you're on uncontrolled wifi (i.e. internet cafes) access points or other nefarious things like mobile providers that rewrite CSP policy (vodafone.pt). These things happen and some safety via a VPN may help.