SystemUIServer is a normal Apple Process. After inspection this process from Activity Monitor >> View >> View ALL processes this is what my machine is showing as Open files >>
cwd
/
txt
/System/Library/CoreServices/SystemUIServer.app/Contents/MacOS/SystemUIServer
txt
/usr/lib/dyld
txt
/Library/Preferences/Logging/.plist-cache.5qWeYuHo
txt
/usr/share/icu/icudt68l.dat
txt
/private/var/db/timezone/tz/2021a.3.0/icutz/icutz44l.dat
txt
/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/SystemAppearance.car
txt
/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/DarkAqua.car
txt
/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/FauxVibrantDark.car
txt
/System/Library/CoreServices/SystemAppearance.bundle/Contents/Resources/VibrantDark.car
txt
/System/Library/Keyboard Layouts/AppleKeyboardLayouts.bundle/Contents/Resources/AppleKeyboardLayouts-L.dat
txt
/System/Library/Caches/com.apple.IntlDataCache.le.kbdx
txt
/private/var/db/analyticsd/events.whitelist
txt
/System/Library/CoreServices/Search.bundle/Contents/MacOS/Search
txt
/System/Library/CoreServices/Siri.bundle/Contents/MacOS/Siri
txt
/System/Library/CoreServices/CoreGlyphs.bundle/Contents/Resources/Assets.car
As for VPN and this will get a lot of reaction for and against the usage of VPNs.
Commercial VPNs should only be used if Mandated by Corporate Head Office for working remotely. Otherwise - ones Privacy and Security touted by the VPN is suspect.