One of the biggest security holes in VPNs is IPv6 leakage. Your ISP assigns an IPv6 address. If your VPN only tunnels IPv4 traffic, your real IPv6 address "leaks" out to the web.