VPNs are not "sillyness", and they have nothing whatsoever to do with preventing employees from stealing data. They are to allow authorized people to securely access the network.