Lots of shady free VPNs out there from Chinese/Russian companies. Now instead of just letting people watch porn, they'll send their data to a shady/foreign entity. The apps will ask all the permissions, and people who don't know shit, will grant them.