[andreasvc]

The first is a feature. The second is not true: a VPN can tunnel through TCP in the worst case, and most NATs allow VPN over UDP using some tricks.