You would need to use an external VPN service to get VPN but it's not necessary in order to hide the content. If you enable SSL and set Certificate verification to strict (enable advanced first) then your service provider can't see what you are downloading. You only need VPN if you want to hide that you are connecting to a usenet server.