I'm guessing some people don't know (or forgot) that site-to-site and remote access VPN's are a thing, and was the initial purpose of VPN's. Masking or hiding your location became a benefit after the fact, and todays more common client VPN is technically a remote access VPN with a new purpose.

Remote access VPN's are a very common attack vector for companies, look up companies compromised with Fortinet gear and its typically through the firewalls VPN.

In fact, a primary purpose of a VPN, spoofing your IP/geolocation, pretending you are someone you aren't... is pretty much antithetical to a highly controlled system of users with varying levels of access to specific, private areas of that system.

Most modern remote access VPN's do exactly that, so it is not antithetical at all and is how most client VPN's keep you from accessing other users data. I would encourage you to read up on WireGuard and the like, they are fun to learn about and awesome tools when configured properly.

Also, we removed the above comment because the last sentence was fairly rude and violates rule 3 @sp3ctr4l@lemmy.dbzer0.com