FIELD NOTES
A personal record of travel, networks and small failures
TRAVEL NOTE

I Needed a VPN, Not a Password Manager, Cloud Drive and Identity-Protection Bundle

The page wanted me to prove my age.

The VPN checkout wanted me to protect my credit score.

I was trying to open a mature-tagged discussion that had appeared in a medical search. Instead of the post, the site offered facial age estimation or an identity-document check. I decided to try a VPN before uploading either.

That should have been a simple purchase: install an app, change the route and see whether the page opened.

Instead, the pricing screen presented three columns.

The first contained the VPN. The next added malware protection, identity monitoring, a password manager and cloud storage. The most expensive tier added more identity services and insurance.

One plan was labelled Most Popular.

I had come looking for one working connection. Twenty minutes later, I was comparing products I had never intended to use.

The short answer

NordVPN’s higher tiers add combinations of malware protection, a password manager, identity monitoring, scam-call protection and cloud storage. Its basic plan still contains the VPN itself. ( Nordvpn )

One Immediate Problem Became Five Purchasing Decisions

This kind of hurried VPN purchase became more common after stronger UK age checks took effect in July 2025. Ofcom reported that daily active use of VPN apps initially doubled to around 1.5 million after the new requirements arrived. (Ofcom)

Many of those users were not shopping for a complete cybersecurity suite. They had encountered one newly restricted page and wanted to know whether a different connection would open it.

That was my situation.

I already had a password manager. My laptop already included security tools. I did not need another cloud drive, credit-monitoring service or scam-call filter.

Yet the higher plan looked safer because it contained more things.

The basic column appeared deliberately sparse. The middle column was highlighted. Its price looked only slightly higher when divided across a long contract. Soon I was wondering whether the larger package also included a stronger VPN.

It did not say that.

The same central connection sat inside each tier. The expensive columns simply surrounded it with more products.

Why VPN Companies Build Larger Bundles

The plan table I saw was not unusual.

NordVPN’s higher tiers add combinations of malware protection, a password manager, identity monitoring, scam-call protection and cloud storage. Its basic plan still contains the VPN itself. (Nordvpn)

ExpressVPN has also introduced multiple tiers. The underlying VPN appears across them, while higher plans add services such as a password manager, eSIM access, identity monitoring, credit reporting, insurance and data removal. (Expressvpn)

The logic is straightforward. Once every plan includes a VPN, extra services give the company something visible to place in the more expensive columns. They create reasons to upgrade and make one subscription feel like a complete security membership.

For some people, that is genuinely convenient.

Someone without a password manager may appreciate having one included. A household replacing several subscriptions might prefer one bill. Identity monitoring may be useful after fraud or a data breach.

The problem is not that the extras exist. It is that the bundle can quietly change the question the buyer thinks they are answering.

I needed to know whether the connection could open one page.

The pricing table encouraged me to ask whether I also needed cloud storage, antivirus, identity monitoring and insurance.

A brief privacy discussion I found later captured the split neatly: some people value the convenience of a suite; others prefer separate specialist tools rather than trusting one company with the VPN, antivirus and password vault together. (Reddit)

Standing at checkout, I was not weighing that choice carefully. I was clicking under pressure.

I Bought the Highlighted Plan

I selected the middle tier.

The provider had a long public history, a large support operation and broad server coverage. Those strengths made the highlighted plan feel like the cautious choice. The additional cost also looked modest when displayed as a monthly average.

After paying, I created the account, installed the app and connected outside the UK.

The age-verification screen disappeared.

A CAPTCHA replaced it.

I completed the challenge and received another. The next server loaded the page header but not the discussion. A third produced an unusual-traffic warning.

I could not observe the website’s internal filtering rules, so I could not know whether the problem was the exit address, the amount of shared traffic or another signal. The result was clear: I had purchased the larger package and still could not read the page.

The password manager did not improve the route.

The cloud storage did not make the website accept the connection.

Identity monitoring might help with a future data problem, but it did nothing about the checkpoint already on my screen.

The extras were real products. They were simply unrelated to the failure I needed the VPN to solve.

That was when the bundle stopped looking generous and started looking like noise.

More Features Had Hidden the Real Comparison

I returned to the pricing table and read it differently.

The plans all included the VPN. The upgrades changed the surrounding package, not the task I was trying to complete. A fuller column had made me assume I was buying a stronger answer to the blocked page.

I had actually bought more answers to different questions.

Did I need another password manager?

Did I want one company monitoring more of my personal information?

Would I use a terabyte of cloud storage?

Was identity-theft insurance relevant to me?

Those may all be reasonable questions. None should have interrupted the immediate one:

Will this connection finish loading the page?

Once I reduced the decision to that standard, the Most Popular label lost its force. A good household-security bundle was not necessarily the right tool for a restricted website.

I closed the connection and tried the smaller app I had previously overlooked.


The App That Began With the Task

OnlydogVPN did not begin by asking me to compare security suites.

For basic use, I could proceed without creating a conventional email-and-password account. The first screen focused on the situation in front of me rather than on how many additional products I wanted to own.

I selected the preset for reaching a restricted page and connected.

Then I opened a fresh private tab and pasted the original address.

The discussion loaded.

There was no age-verification handoff. No CAPTCHA appeared behind it. The post opened, the comments expanded and the medical reference linked inside it loaded normally.

That was the first attempt that completed the task.

The service uses HTTP/3-based transport with additional traffic obfuscation. The technical explanation only needed to account for the visible difference: the larger provider’s familiar shared routes had led to repeated challenges, while this route opened the page.

Just as importantly, the app had not forced me to make five unrelated purchasing decisions before testing it.

I did not have to decide whether to migrate my passwords, replace my existing security tools or move files into another cloud service. I selected the problem and returned to the browser.

The larger plan had offered more products.

The smaller app had removed more obstacles between the problem and the result.

One Additional Feature Earned Its Place

After reading the discussion, I opened the external article linked inside it.

A blocked-request counter began to rise as the service filtered advertising and tracking requests in the background.

That feature made sense in a way the bundle had not.

It appeared after the original page worked, and it addressed a smaller problem created by the same browsing session. I had avoided the identity-verification flow; now fewer tracking requests were accompanying the pages I opened afterward.

There was no separate application to install, no new vault to configure and no second subscription to understand.

The benefit stayed close to the task that had brought me there.

That became my distinction between a useful addition and bundle padding.

A useful addition solves friction the user has already encountered.

A bundle asks the user to imagine enough future problems to justify the larger column.

The Smaller App Has a Shorter History

There is a real trade-off.

The service has fewer locations, fewer independent ratings and a shorter public history than the established provider I tried first. Someone choosing mainly by years of outside scrutiny may feel more comfortable with a larger company.

That limitation deserves to remain visible. Simplicity alone is not proof of quality.

But the comparison also includes what happened after I pressed Connect.

The established provider had brand recognition, mature infrastructure and a broad suite of extra products. Its highlighted plan gave me more features than I needed while the page remained trapped behind traffic challenges.

The smaller service required less identity at setup, reduced the number of decisions and opened the discussion.

For this purchase, direct task fit mattered more than the amount of software included in the subscription.

Why the Bundles Keep Growing

VPN companies bundle features because a stand-alone VPN is difficult to differentiate on a pricing page.

Most established services already advertise encrypted connections, many server locations and apps for common devices. Password management, antivirus, cloud storage, identity monitoring, data removal and insurance create new tiers and new reasons to remain inside the same company’s ecosystem.

That strategy can work well for customers who truly want a suite.

It can also make a first-time buyer compare the wrong things.

A person facing a blocked page may assume the largest package contains the strongest connection. A traveller may pay for identity protection when the real need is recovery on unstable hotel Wi-Fi. Someone concerned about privacy may focus on the bundle’s promises while overlooking how much information the VPN itself requires during registration.

Features are not valuable merely because they fit inside one subscription.

They are valuable when they solve the problem that made the user open the pricing page.

I began with one age-verification screen and ended up considering cloud storage, insurance and a second password manager. None moved me closer to the discussion I wanted to read.

The bundle made the purchase feel larger. The smaller app made the page load.

For this task, the most valuable feature was everything I did not have to decide before pressing Connect.

Questions this experience may leave you with

What was actually causing the problem?

NordVPN’s higher tiers add combinations of malware protection, a password manager, identity monitoring, scam-call protection and cloud storage. Its basic plan still contains the VPN itself. ( Nordvpn ) (Nordvpn)

Why did the obvious fixes fail?

ExpressVPN has also introduced multiple tiers. The underlying VPN appears across them, while higher plans add services such as a password manager, eSIM access, identity monitoring, credit reporting, insurance and data removal. ( Expressvpn ) (Expressvpn)

What should you check first?

The first contained the VPN. The next added malware protection, identity monitoring, a password manager and cloud storage. The most expensive tier added more identity services and insurance.

What finally changed the result?

A person facing a blocked page may assume the largest package contains the strongest connection. A traveller may pay for identity protection when the real need is recovery on unstable hotel Wi-Fi. Someone concerned about privacy may focus on the bundle’s promises while overlooking how much information the VPN itself requires during registration.

What is worth remembering?

I began with one age-verification screen and ended up considering cloud storage, insurance and a second password manager. None moved me closer to the discussion I wanted to read.