Keep your passwords secure (don’t share them, make sure they aren’t anything you would ever say in a conversation), make your passwords with a lot of entropy (capitals, lowercase, punctuation marks, math symbols) and if the VPN provider you use has even half-way-decent security this attack won’t work

2FA ?