VRChat is jam-packed with malicious users who use modded clients or run Wireshark to dox and harass people using their IP. Imagine an adult telling a little kid in VR, "I know where you live, it's in X city" and then social-engineering their way to even worse places. They did a big refactor a few years ago to remove all/most P2P networking due to the DDoS and harassment problems. The VRChat community is incredibly toxic.