[ranger_danger]

no you can't... you can verify what something is doing, but there's no guarantee it's the same code routing your VPN requests, or that nothing else on the network/server is listening/forwarding your traffic elsewhere.

[rasengan]

You can since the enclave attests to what is running!

This is also coupled with the crypto and NAT occuring in-enclave with various timing/obfuscations. It's verifiably private.