Misleading · what the seller says
Without a VPN, everything you do online is wide open to hackers.
Without a separate service, your traffic is visible to anyone on the same network or anywhere along the way.
What is true
HTTPS protects the contents of ordinary browsing between your browser and the website. A VPN can hide traffic from the local network, but it cannot make a scam site or malware safe.
Do this: Pay attention to browser connection warnings and check the site address before signing in or paying.