Verified Privacy vs. "Trust" Marketing: A Case with NordVPN and Obscura