L2TP can be authentificated by using a pre-shared key or ceritifcates which are unhackable, but sadly most VPN companies only provide preshared "secret" keys, which are weak and easily hackable. Why is that? Otherwise very good vid, it's what I've been looking for.