Right. I have a vpn which offers split tunneling though I don't use it. The connection is encrypted inside a tunnel, so there allegedly is no man in the middle attack. The attack point is at the vpn server and whether I trust them or not. I think I trust them more than my isp.