But it is true that "security" is nothing more than a risk-benefit exercise.

The only "secure" system is one behind a locked door, not connected to a network, in a magnetically shielded room. Not very functional now, is it? And most of the security "opinions" out there are just the blathering of OS bashers (pick your target OS and bash away).

VPN will provide adequate security for most, regardless of OS ... if you're that worried about the snooping of your data while in the CRC then maybe you should just leave your laptop in your bag and have another drink.