A VPN reduces the chance of your ISP knowing you visited the site, but it does not make the activity legal or safe from malware.