Shameless plug: VP.NET [1] runs in a trusted execution environment (enclave) so you can verify it is doing what it is supposed to do and not anything else!
This is also coupled with the crypto and NAT occuring in-enclave with various timing/obfuscations. It's verifiably private.