Suspicions, inferences and reasonable concerns are perfectly fine. Answering questions with questions is less fine.

Statements of categorical fact about a whole class of things (in this case VPNs) demand more than that.

Well, it's not my bank account and it's not my IP address.

You do you.