A VPN is useful for reaching internal resources like an on-premises server or NAS that isn't otherwise published to the internet, but for most cloud-based businesses on M365 or Google Workspace, secure sign-in with MFA and Conditional Access does the heavy lifting instead. Consumer "privacy" VPN apps are a different thing entirely and rarely what a business needs.
Coach's tip: ask your IT support what the VPN is actually protecting — if the honest answer is "nothing anymore," it's fine to retire it.
Book a free tech audit. A 45-minute call and a written summary, no obligation.