[dwild]

> - Even if all of the above were not concerns, am I able to properly secure user's data (against say state actors)

Operating a VPN isn't any different than an ISP. Should that be a concerns for ISP too?

Most traffic nowadays is over HTTPS either way, so if that was even a concern, the ISP or VPN wouldn't be the cause of it, but the actual communication in itself.