That sucks. I've been having my own issues with them. Tomato has no VPN capability at all, and DD-WRT doesn't support a mode compatible with my FatPipe. FatPipes suggestion? Buy more FatPipes @ $20k/each.
It depends. I can drop $20k for the main office, where 250+ people use the web and all the remote site VPNs connect. Some of the remote locations only have 2 people selling sand (literally) or 5 people renting out porta-potties (seriously). In order to keep these locations profitable, some restraint is required.
I have weatherproof enclosures bolted to poles in the middle of nowhere where space and power consumption are considerations. Having the ability to VPN before jumping the wireless bridge might be nice. Might also be good for integration into IoT products.