Onion sites can be malicious and can be stealthy too. Therefore, it is always vigilant to get a VPN, when you are exposed to risk.