> I'd hope the VPN service is built and operated in a way that doesn't require trust

Unless you're continuously verifying, this requires trust that it is built that way and/or won't be changed in the future.