A VLAN allows a network manager to logically segment a LAN into different broadcast domains. Since VLANs provide separation between devices, they effectively control broadcasts and increase the security by limiting who can see traffic on the VLAN. They're not primarily focused on encryption or linking devices but rather on segmenting a larger network into more manageable pieces.