> Strange how this implies that the end-all-be-all of VPNs is IPsec

And no mention of poor configurations such as IKEv1, pre-shared keys and aggressive mode?

The NSA did like breaking IPSec VPN configurations according to documents exposed by Snowden