Is there any risk to actually playing on 2b2t?

I'm mainly curious because YouTubers make it sound like if you so much as connect to the server someone's gonna steal your IP and banking information. How secure is it? Do you need a VPN?

Or am I completely overthinking and there's zero risk?