Ah, I see, yeah I’m not aware of others doing both at once. I do think it’s a decent security model.

And yep, the big deal is controlling entry+exit gateways. Trusting those will always be the fundamental risk point in VPNs.