If this is your threat model, then VPNs are definitively not enough. Still a European VPN provider might be better than nothing.