My understanding is that there's is an entirely legal official channel. All the tech companies use that to access GitHub, for example. Likewise for some universities and hotels.

It's an important detail that this guy is using VPN to work from home, not at work for a company.