Added: it doesn't prevent leaks caused by bugs in the VPN software.