Ah, I understood that SSL encrypts the data, but I always assumed there was still a risk of it being intercepted (before encryption) if I was on an open WiFi network.
Maybe it does, but there are enough other unencrypted sites that I'd rather have the VPN.