[jeffbee]

It says that personally-identifying information is not present on the VPN endpoint and no user data is logged, only service metrics with no identifiable information. Specific data logged and not logged appears on page 4 and 5 of the whitepaper.

[staplers]

As with browser/device fingerprinting, I expect "service metrics" to be able to identify users regardless if their name is attached to it.

[jeffbee]

It says that the users "cannot be identified" which is a much stronger statement than you are giving them credit for.