Using a VPN might have security implications (such as now, you have an additional central entity, maybe not in the same jurisdiction as you, that can list your network connections to a requesting entity), or not be an answer to your thread model.
I don't really blame them for this though. Buyers should also do their homework.
Why would they?