Apple's next privacy service should be a VPN