OpenZIti expertise questions

I have a set the source and destination in OpenZiti to open a tunnel. Between source and destination there are multiple paths and hubs with multiple IP addresses. Is there a way to ensure that classified information is routed only through a classified path? What ensures this along the tunnel path?

A tunnel has multiple nodes , hubs and paths then what is the possibility of getting man in the middle attack. the man in the middle can access any of this node or hub in middle.