Both route your traffic through a third-party server, but they work very differently and offer very different levels of protection. Here's what you actually need to know.