That’s not exactly true. It really depends on what you’re trying to protect yourself from.
If you’re running an ARR stack, The Pirate hunters out there are going to end up empty-handed at a half decent VPN in a foreign country. But if you’re doing something that will draw the ire of the FBI, CIA or secret service, it’s a little more than a speed bump.
Many local ISPs basically hand the keys directly to law enforcement without so much as a warrant. Most of the VPN providers will at least put up a minor fight to stay in business.
Their tech debt for the most part isn’t going to be because of the engine. Certainly some of it is. But starting back over and reimagining most of the code base affords them the time and ability to fix problems that make features problematic. As the spiffing Brit likes to point out every one of their titles is absolutely riddled with game breaking bugs. Doing an engine change has the kind of depth required to let them head those kind of problems off before they happen.
Of course with an entire staff of short timers they’ll quickly just a mess new tech debt as they misgauge things.