content: Yes. If you can crack my WPA password you still can't do shit on my network until you can also connect to the VPN. Without being connected to the VPN there's nowhere to go. All those IPs have only one static route ... to the loopback address, which is the VPN server. If the tech exists to crack 2048-bit keys used to secure the VPN we've got bigger problems.