That is correct, there are lots more to be reviewed, I noticed one thing, I have three devices and I used the same email on all the three devices before, I was using VPN on just one of the devices before, later I decided to use VPN on the three devices, all I noticed was that my password to login on the VPN just pop up when I wanted to sign in on the other two devices. Not only that, it happens to anything I am doing using an app I already have on one device but want to log in on another device having the same google email. I later knew google backs up my data. If one of the device is stolen by hackers, that will be the end as all my passwords will be known to the hackerss, because all my logging details are stored on google, I later have to delete all the login details. So now, I also deleted main google account on the two devices, and anytime I am registering for anything on my device, I do not save passwords again but only making back ups offlinne. You are very right.

You are right, VPN has its own issues, there are many VPN providers that indicated they do not save users log, but lies, I have noticed many case like that, about the ones you have just implied now, I found it now to also be true. I have seen ExpressVPN to be the best VPN, although it is the most expensive but actually the best.