Hacker News Reader

The assumption is that the VPN operator is more trustworthy than an unsecured network.

Yeah, and even if the network operator is trustworthy, often times any other user on that network can mess with you, e.g. ARP poisoning.