You have to turn off your VPN to access their site which makes the VPN useless- a VPN is set up to protect things like financial transactions. I think they have two-step verification already- if not, just set that up. Or secret words, whatever.

Source: Trust Pilot