So who are the biggest users of VPN's?
People wanting remote access to "stuff."
And the people most likely to be running short code length connections?
Large businesses who got it running a long time ago and don't want to fix what's not broken.
Yes, I think quite a lot of people should be worrying.