Why Volkswagen?

NO, an attacker getting control over a vps used as a tunnel could not read Data captured in the past. Also they could not do a MITM with decrypted SSL without breaking HSTS

But having a reverse proxy would enable someone getting access to it to read traffic, while having a VPN Tunnel won’t.

Last time I looked it had way less features then yunohost and its closed source.

Des, it has, what most others lack: Single Sign In and many Apps.