A VPN can’t protect a connection that keeps dropping because of a damaged patch...
https://astro-wiki.win/index.php/Is_CAT6A_worth_it_for_10Gb/s_over_100_metres%3F
A VPN can’t protect a connection that keeps dropping because of a damaged patch lead. And a switch left on default credentials can give an intruder a path across the network