I don't consider VPNs to be secure against someone who is specifically targeting you. The reason I added a VPN to the options, as stated in the guide, is to protect vendors. I didn't mention the specific attack that it protects against, but I've described it before: The purpose of the VPN is to avoid connecting to entry guard IPs, not to defeat traffic analysis. You can achieve the same result with bridges, but LE may have enumerated most of the bridges, whereas they probably don't have the IP addresses of all the OpenVPN servers in the world, so if you pick an obscure VPN provider in an obscure country, you're safer than using bridges.