How secure is it? – Red Onion II: Tor-powered Web Review

I originally used the first Red Onion app. It was really good, but it failed certain tests at browserleaks.org, such as the webrtc check. It returns your real IP. For this app, I have a couple concerns. First, where is the VPN connection connecting to and how do we know it can be trusted? VPN is only as secure as the company providing the connection. Second, the VPN route is good in that everything on your iPad will use that and go over the Tor network. That sounds like a great idea, but mail, twitter, etc, will be logging into your normal accounts in the background through the VPN connection. You should never access the same services/accounts both on and off Tor. Maybe I am misunderstanding and the developer can respond with some clarification. Right now I consider both apps to be insecure enough to warrant deletion. I will update my rating if my concerns are proven to be incorrect. I’m not trying to be unfair or rude, but when it comes to security, you should absolutely ask questions, and to borrow a phrase, trust no one.
Review by Melenrahl on Red Onion II: Tor-powered Web.