can you be more specific about the VPN part? Do all VPN work? In theory or in the current ecosystem?

Not every one considers Riseup to be trustworthy. Forcing users to use services they don’t trust is not appealing.