@moonman @aven @clacke And found it! https://torrentfreak.com/huge-security-flaw-can-expose-vpn-users-real-ip-adresses-151126/https://shitposter.club/url/550403 It was port forwarding! So State parties can, and do pwn privately owned and trustworthy VPN providers al the time.