> What's wrong with VPNs? Seems like the tamest thing to sell in terms of ethical impact.
Well, for starters the actual "security" that is often promised from these services is WAY overblown. You are already very secure browsing the internet using https. The TLS standard grants a huge amount of security that doesn't allow for snooping from a MITM.
So, when they start saying "everyone needs to do this to be safe". That's simply a boldface lie.
Your security when going through a VPN is from using https. If you are unfortunate and get a less than scrupulous VPN you might end up with them adding themselves as CAs (yes, some VPNs do that). That allows them to crack and access data within the secure stream.
Most of these VPN services are also trying to get you to do DNS with their DNS servers. Again, a major potential privacy leak problem.
> That's what a security app needs to properly protect you
VPNs aren't anti-virus software and any VPN selling that should be EXTREMELY mistrusted. You are right, they can only provide that sort of service by decrypting your secure payloads. That is where all the scamminess comes into play.
Certainly not every VPN service is bad, but I'd have an inherent mistrust in one that has both a cheap fee and the seemingly endless budget to advertise everywhere on youtube. They are getting money from somewhere and I doubt it's from grandmas signing up for the service.