Basically yeah - the only thing exposed with ssl w/o vpn is the initial connection to your provider, so your ISP or another entity eavesdropping could prove you initiated a connection but would have no idea about the contents transferred. A little pedantic I know, but best to be informed of the minutia of these endeavours.