it's not, my previous company took everything offline - they got infected via connections to their offices in Ukraine. lots of companies in the Ukraine are infected.

company I work for disabled all working from home VPN accounts for the time being until we do a security audit