VPN gives a little extra layer against vulnerabilities in any packages your internal services depend on.