A VPN is only as good as its level of encryption. Most of the short-key cases are fairly vulnerable. AES-256 is what the U.S. Navy recommends. The AES-128 and -192 are no longer used as often. If your VPN uses shorter keys, you are taking a greater risk.