IKEv2 and L2TP have no known major vulnerabilities, but they don’t provide much security on their own. They have to be paired with IPSec for encryption, and there are allegations in cybersecurity communities that the NSA may have compromised IPSec. If you’re doing journalistic research or activism and you fear the government may be monitoring you, it’s best to avoid IKEv2 and L2TP.