A compromised VPN can give a cybercriminal access to your devices and give them control of them using spyware or ransomware if they are targeting you.