VLC is probably illegal in some countries due to the patents applying to a lot of video and audio codecs. If Sourceforge downloads were over an encrypted connection, one could avoid monitoring.

That illegality applies to the developers of VLC, not to people downloading it.

SSH tunnel to a cloud server in Europe, then download over that.