1. You left out one of the most important parts of a VPN, namely for when you're using an untrusted wifi network.

2. I think you're overstating the shifting-IP problem. If nothing else, you should be using 2FA on things like PayPal anyway, so I don't really see how it requiring an additional step is somehow a problem. Meanwhile, if a site outright locks you out because of a login attempt from a different IP, it's time to find a new site.