security risks of exposing VPN use to state actors