If a VPN client is configured insecurely, users may utilise its security mechanisms incorrectly (or not at all). They could also change the configuration of the VPN client. Due to insecure configuration, software installed by users may also threaten the security of the VPN client.