A security analysis of 281 Android VPN apps shows how a product sold as protection can still leave users facing leaks, tracking, weak encryption, and tunnel interference.