

If you want a simple explanation why he couldn’t spy:
Imagine that your internet traffic is a bunch of letters. HTTP are postcards. You can read the message and destination both. HTTPS are envelopes. You cannot read the message, but you can see the destination.
When using VPN, you stick every letter/postcard in another envelope, addressed to the VPN company’s address. They unpack the letter, set themselves as the return address, and send it on.
Your friend could previously look at the outside of your letters, and see who you’re sending to, and how much. Now, they can only see you’re sending to the VPN company, which isn’t helpful. (In theory, they can see the volume of data, but there isn’t much they can learn with just that).









They are used in the majority of European languages, including French. You might see them natively in Canadian-English written by the French speaking part.
Furthermore, because they are used in ~41 different languages, someone using a keyboard layout in that language will get that character, even if the key they press is labeled with an " icon.
Lastly, you should know that Breton (the language/culture that Great Britain is named after) uses them. Not actually directly relevant, but it does show a direct lineage of using guillemets in English. (And also it’s a neat fact).