You should point out that while there is risk in using an open or un tested wireless network, there also is risk in using a VPN from an unknown vendor. All your traffic traverses the VPN to hide your exercise from monitoring on the wireless network, but now you are just giving the vendor that adds the VPN carrier all of your site visitors to check out. Do you trust the VPN vendor?If you do trust them, what do they record?It would probably be best to set up your personal VPN firewall at home/office after which VPN to that. That way, all your traffic goes across your VPN after which the Internet connection at the house/office. No other vendors involved, except your house/office ISP.