You should do your initial vpn setup and first connection over a known good secure connection. Good vpn apps also pin certs and will warn you about migrating hosts or unexpected IPs.