[toyg]

It depends on what your threat model is.

For example, my VPN is based in Thailand. For various legal reasons, it's very unlikely anything obtained by a nation-state actor in Thailand will be used for trivial stuff like, say, enforcing copyright legislation against individual consumers. Defense lawyers / barristers would have a field day. If you are planning terrorist acts, on the other hand...