Should you use a VPN? Best VPNs for 2021

I worked for one of the largest Telcos in the US doing security work and I have to offer a caution. First a disclaimer:

I am not saying NOT to use a VPN. But a VPN alone should not be the totality of your defense.

Permit me to lead off with an analogy. In military tactics from platoon level to full armies what is a primary objective of a defender? One is to herd your opponent into a killing field either by topology, or active engagement to the killing zone. Move the attacker into a position where outmaneuver options are minimal.

Now think of what a VPN is in actual terms. It is that pass thru which the data must flow to reach perceived safety to the end point objective, the killing field. Any reasonable NSA/CIA analyst would by hook or crook plant their listening devices just downstream of the exit point of the VPN and siphon the data streams. The identified origin point maybe obscured but any system listening to individual data points can piece together rational assumptions as to whom the sender is. Classic example is Google suggesting prenatal products to women based solely on their viewing habits. Those techniques can be applied to other realms other than just marketing.

Points:

* The best VPN is a closed system. The data of the sender is traversed by a VPN to which the receiver is not a public network end point. Typical example is an employee gaining access the corporate network via an corporate VPN. Its end to end secure.

* The next best would be selecting a provider whose end point terminates in a country whose laws are pretty strict, even against searches by officials. Switzerland is an example. Do your research there are others.

* After that is, anybody will do, because doing nothing is the worst option. Just recognize that doing a VPN alone is not total.

* If most of what you do is via email then use secure email providers or at least or in tandem encrypt the document(s) before you send it. If you are really paranoid encrypt your attachments with a different encryption than your mail encryption uses.

* Recognize that certain protocols (eg FTP) are not secure and should not be used period.

* Take a peek at your traffic. Do you do anything in China? Then why not set a filter to block that traffic inbound and outbound.

* Gmail is a fantastic service. I have an account. But be selective about your use of the product. If its sensitive comms use something else.