How to provide consistent encryption on a VPN chain?

Question

VPN

How does it happen, as in the first picture:

or as in the second:

?
To paraphrase, if an entity appears between VPN1 and VPN2, will it be able to scan the traffic in plain text, or will it receive only unreadable noise? And, if he can, how to bring the picture to the form of picture 1 (and is it possible)?

Answer 1

Happens as in the first picture. But the provider still knows the fact of going to the VPN. And thermorectal cryptanalysis takes passwords of any complexity...