DuckDuckGo has always promised complete privacy with its VPN, and an independent cybersecurity company agrees.