I read it's only if your device is listed on RPI's active directory (might be something else) such as library computers. I was connected to eduroam for four days and haven't seen anything downloaded. In addition, if you need to use the VPN download openconnect instead, as Cisco AnyConnect downloads Umbrella which tracks you even after disconnecting the VPN