That's not [always] the vendor's fault (sometimes it is - often enough, however, it's varying levels of government interference)
Also: VPNs are a thing