VPN may be used as an artificial bottleneck. In large LAN-architecture with many services running you minimize the attack area when potential threat-actors first have to get access via VPN.