So long as a VPN implements its OpenVPN using specifications that exceed the bare minimum expectations for protection recommended because of the OpenVPN Group (AES-128 or 256 cipher with RSA-2048 handshake key and HMAC SHA1 hash auth); the protocol is s entirely secure in opposition to intrusion.