Why every VPN should use post-quantum encryption