A VPN can’t protect a connection that keeps dropping because of a damaged patch...
https://www.cyberdaily.au/strategy/14271-why-physical-network-infrastructure-is-the-overlooked-foundation-of-your-cybersecurity-strategy
A VPN can’t protect a connection that keeps dropping because of a damaged patch lead. And a switch left on default credentials can give an intruder a path across the network