What if there's another backdoor lurking in your VPN software? Why are you more confident in your VPN than SSH? Of those two pieces of software, which do you think has more eyes on it?