I know we like to get the pitchforks out, but, it appears to be accidental:
>The ideal situation would be to move these services to be installed when VPN is first USED (post purchase) and not at install time.
That seems somewhat shady, unless there was a credible explanation?
If anything, by leaving it open that would have advertised how attentive their employees are.