點解要有L2TP/IPSec?

IPSec本身己經係vpn
L2TP因為比較差, 所以先要夾IPSec一齊用
但既然用得IPSec, 點解仲要加多層L2TP?
難道唔會有trade-off?