How does a VPN protect against flipping a URL to exfiltrate the message contents to an attacker-controlled server?