A VPN can be required to access internal network(s) without implying a lack of further roadblocks/restrictions/authorization checks/etc.