When the information goes from you to the source, it traverses multiple servers regarded as "nodes". Because these servers are public, hackers can infiltrate a node and intercept your data. When you use the private servers of a VPN, they protect you in two ways. First, their only available to subscribers, and secondly, they use a technology that if it detects an infiltration, immediately switches to a different node. Kind of like when you see an object in the left lane, you go into the right lane for safety. Nord VPN, Express VPN, and Strong VPN are all good ones. Two factor authentication good, cause bad guys don't have your phone, but you also need to protect your phone number from theft(it happens). You can do that by going to your carrier and create a password to prevent the porting of your number to another carrier.