Encrypted SNI (ECH) is now on by default. It hides which sites and servers you connect to from your network and your ISP — not just your traffic, but the destination itself. You can turn it off in Settings if you need to.

The connection screen's privacy checks now verify live: each one turns green only when it's actually true for your session, never as a static claim.