A random hacker is not likely to intercept your HTTP message. They would need to be on the way between your browser and the target site.
A more realistic case is an enterprise network or an ISP.
A more realistic case is an enterprise network or an ISP.
Of course, now you need to trust your VPS provider but I'd trust someone Digital Ocean before I'd trust a cheap VPN provider.