I don’t like the idea of a third party doing MitM type intercepts. I want control over anything that sees my unencrypted data whether it’s web services or chat services, etc. So for me the VPS is worth it. But I do also use my VPS for some other services that use apps or other APIs that don’t allow for presenting the Pangolin/SSO login step, and aren’t too risky to have a bit exposed rather than the responsiveness and battery cost of the separate VPN connection. One day I need to find a better way to handle those but for now it’s fine.