Well, it does more than just XOR but the goal is to just scramble the traffic enough that it looks like a bunch of nonsense rather than a TLS handshake. The act

Well, it does more than just XOR but the goal is to just scramble the traffic enough that it looks like a bunch of nonsense rather than a TLS handshake. The actual VPN provides the encryption, this layer adds a socket on top that garbles up the data.