Is the rest marketing bullshit because of insurmountable technical challenges or is it because you have to __trust__ the VPN service? I.e. if I were to somehow think up a business model that included some novel level of transparency, could I provide a VPN service that could honestly claim to provide privacy and security to its users?