How does this compare to Mullvad who also use randomized account numbers? Beyond that, whether account number activity is logged is a matter of trust.
If implemented correctly (and that's a big if!), a nested tunnel approach can make that much harder and require global passive or active traffic observation capabilities (for timing observation, possibly with active timing modifications, of specific flows), or collusion of at least two different entities.