A research audit of Google Play VPN apps found that cleartext transmission still appears inside software sold as a privacy tool, exposing a gap between branding and actual transport security.