RMS, you are a world class hero. It scares me to imagine a world where one needs to audit on perpetuity or reverse engineer everything just to have a little peace of mind. I wish for activists with your passion and energy in every field of knowledge.

Please please please, read "Flowers for Algernon" by Daniel Keyes, either the long or short version (preferably the long one).

This actually makes the problem solvable

edit: in 2-D. Even without the typo it was solvable in 3-D.

It narrows the chance of DNS interception but the second attack can be mitigated through certificate validation of the VPN server.