Sorry for the second post, still can't edit my posts.
Reading your post again
@pware , I would argue that a VPN is giving you a false sense of security. All a VPN does is hide your tracks from your ISP by encrypting it between you and a server somewhere out there on the Internet, run by the VPN company.
From there your data is out there on the Internet, still subject to man in the middle and many other attacks. Email should be presumed to be insecure, because it is not encrypted in transit.
VPNs are for people who want to visit alternative websites that they wouldn't want on their permanent records a.k.a. their Google profiles LOL.
But if you're actually logging into websites, reviewing bank accounts, view other personal information over a VPN, the VPN isn't keeping that data any more secure than not using a VPN, except for hiding it from your ISP.
Now most ISPs collect and resell data about their uses, so using a VPN to keep that data from them, that's probably a good enough reason to use a VPN. But I don't really care, I don't use one normally at home.
But my mobile devices, those are on VPN all the time.