Static HTML, yeah.

Not sure about VPN. Seems likely to provide a false sense of security.