It’s misleading marketing. Modern HTTPS fixes all the issues they say a VPN solves. NOBODY is entering sensitive information on an unencrypted HTTP website.
- you visit once, or only on VPN, and have never visited before
- you don’t have a personal account on
- doesn’t contain third party scripts that track and correlate data (any js can obtain every point on that page and POST it away).
In practice, unless you are going extremely out of your way to protect your privacy, (for most cases) a VPN is security theater and may even further expose you depending on your threat model.