yo yep exactly, I went down this rabbit hole myself, ended up just using a no-logs VPN like Mullvad before the VPS and honestly felt a lot better, but even then ymmv. That way the VPS only sees encrypted traffic from Mullvad to it, not what's inside. Still not perfect but kinda lowkey peace of mind.