An encrypted tunnel between your device and your office or a provider, so your traffic is private on any Wi-Fi.
Like an armoured tunnel under the street between your laptop and the office: whatever is above ground cannot see what travels through it.
A four-person engineering firm opened Remote Desktop directly to the internet so staff could reach the server from home. A password guessed by bots became a ransomware incident within a month.
Network covers the firewall, switch and on-premises authentication. A VPN on that firewall, with MFA and current firmware, is how remote staff reach the office. Patch Management keeps devices current.
Example scenario: A small surveying firm had staff in the field for weeks at a time. They connected to the office server through a VPN with MFA on every login. When a flaw in their VPN appliance was announced, the firmware update was applied the same evening, and the published exploit found nothing to use.
If my files are in the cloud, do I still need a VPN?
Often no. If everything lives in Microsoft 365 or Google, a VPN adds little. It matters when there is a server, a NAS or a line-of-business app that lives in the office.

Every WILDCARD card exists to solve one named problem. Find yours.