The risk of using VPNs for privacy