If the thing they are trying to do requires lots of data transfer, somehow, then TOR would not be ideal. Big Data makes TOR a bad experience. For that use case, a VPN alone is mostly enough (except the risks that can mitigated by reading other comments here)