Their primary purpose is usually encrypt the connection between different endpoints… by creating virtual private networks…
Unfortunately this comes up a lot, with people asking if Immich supports end-to-end encryption and getting told to use LUKS or Tailscale.