I would love to use it more but:

1) Has there ever been a full security audit?

2) if not and I run it inside a VPN (wireguard) doesn't that remove most of the benefits?