can VPNs be exploited