Virtual private networks have become one of the most aggressively marketed consumer security products on the internet, and the pitch is familiar: more privacy, a hidden IP address, and safer browsing