Really? I don't see much in the docs about this except https://www.varnish-cache.org/docs/4.1/users-guide/vcl-inlin...
They seem (at first glance) to have no concept of security in the sense of restricting people's access to certain content like in the case of all social networks.