Pay attention to DNS leak prevention when choosing tools. Even with proper tunneling protocol implementation, insecure DNS queries bypass encryption completely, exposing browsing habits despite other precautions