[dredmorbius]

That entirely depends on the trustworthiness, and opsec, of the VPN operator.