Nothing on the internet is totally unhackable.
True, but being a more difficult target will make you somewhat safer - depending of course on the reward the cracker (nefarious hacker) will get if he/she gets in.
It's the cost (time and effort) vs. gain (money and/or prestige).
If you are logging into your account at Starbucks without a VPN, you are a very easy target. On the other hand, if you are using a VPN and 20 other people in Starbucks are not, chances are the cracker will probably go for the low-hanging fruit. That is unless you drive up in your Rolls and look like you are worth a fortune.
If you are a huge corporation with the credit card credentials for a million customers, you probably aren't low-hanging fruit, but the extra time and effort to crack the system would be worth it in monetary gain.
There are multiple levels of security, and none of them are foolproof. However, each adds a bit of extra protection.
Smart surfing and e-mail habits are essential. This morning I got a very official e-mail that said I was close to exceeding my e-mail cap and I could click that link to free up space. The other day I got one about an unpaid invoice. And of course the well-worn-out "I have been watching you through your camera doing something embarrassing" e-mail. We all know that clicking one of these is the easiest way into your computer. But enough people do so that sending out zillions of them brings in a profit.
All the VPNs, Anti-Malware, and other devices won't help if you don't use your brain. But I think all of us here know all that.