But then you have to trust that the VPN service is built and operated the way they say it is.

Or have we already forgot about Zoom's "end-to-end encryption?"