James Saldana wrote:
Don't need a VPN at all? VPNs are often required for work.
There are two different sorts of things confusingly called a “VPN”.
There is the older and classic VPN stuff, used to connect i into the internal network of an affiliated organization, and this is what you refer to as “required for work”.
There is the newer and immensely-overhyped VPN stuff intended to (badly) solve a problem (coffee shop or ISP local connection monitoring, network connection interception / miscreant in the middle) that hasn’t existed for a decade or so (q.v. TLS, HTTPS everywhere, iCloud private relay, etc), but this type of VPN is perfect for personally-identified data and metadata collection.
When you read grumbling about VPN clients and VPN-related issues posted around here, it is usually about the latter sort; about the overhyped VPN add-on apps.
The older VPN stuff will probably end up being lumped into Software Defined Networking (SDN) or otherwise renamed, as that classic use of the term VPN has been superseded by the metadata-collection and advertising-oriented VPN term.
Both sorts of VPNs can and do alter IP network routing, but the accessing-an-affiliated-internal-network VPN/SDN stuff usually has an IT group and escalation path to assist with issues and questions that might arise with the VPN/SDN. The latter sort of “coffee shop” VPN is what is more commonly experienced and discussed around here. The latter is some of which has blocked both local Wi-Fi access as well as cellular data network access either due to bugs in the VPN app or due to bugs or changes in the Apple networking stack. It also increasingly tends to get blocked by secure network services and security-focused websites.
TL;DR: The overhyped “coffee shop” VPNs are problematic, at best. Some background info: