What did I miss?

Cure53 concluded their report by stating that they “..attempted to identify any potential methods by which a user's VPN traffic anonymity or integrity could be compromised. No such issues were found, and no vulnerabilities affecting the core product were detected.”